System Engineer 645

Freedom Technology Solutions Group; Herndon, Northern (VA, KY); Hybrid; USD 110,000 - 165,000; Full time

Benefits offered by this job

401k matching

Fully paid medical care

Generous paid time off

Tuition reimbursement

Life and disability insurance

Company events

Job summary

Freedom Technology Solutions Group seeks a Cloud Engineer to accelerate mission delivery by leveraging multi-cloud computing across AWS, Google Cloud, Oracle Cloud, and Azure. You will manage security assessments, compliance, change management, and continuous monitoring across CSPs while coordinating with Sponsor staff and other contractors.

Ideal candidates hold an active security clearance with polygraph and have experience with A&A packages, RMF, and security metrics.

Qualifications

• Active security clearance with polygraph required.
• Experience designing, implementing and reviewing cloud security architectures.

Responsibilities

• Assess cloud security technologies for gaps and weaknesses per industry standards.
• Review cloud security body of evidence packages for completeness and accuracy.
• Facilitate TEMs with cloud service providers to review cloud service architectures.
• Provide project management support including planning, task tracking, milestones, and resource coordination.

Skills

TEM facilitation

Security clearance

A&A packages

Cloud architecture

Cross-domain tech

Continuous monitoring

POA&Ms

Compliance tools

NIST RMF

Security assessments

Program management

Metrics dashboards

Tools

Rapid7

Nessus

Qualys

Xacta 360

Risk Vision

RSA Archer

Job description

Freedom Technology Solutions Group is looking for a Cloud Engineer to accelerate mission delivery and connect mission partners with the power of commercially-driven cloud computing. The team brings multi-cloud solutions to mission environments, supporting cloud services providers (CSPs), and offering cloud services across multiple networks. In this role, the ideal candidatemanages security assessment, security compliance, change management, and continuous monitoring responsibilities across four (4) cloud service providers: Amazon Web Services, Google Cloud, Oracle Cloud, and Microsoft Azure.

The Contractor shall ensure that all development and modifications to existing Sponsor applications comply with Sponsor's security and architectural policies and regulations. The Contractor shall be required to communicate and collaborate across organizational boundaries, to include other contractor teams. The Contractor shall be required to work with Sponsor staff and contractor personnel as well as external stakeholders. The Sponsor will direct priorities and delegate tasks.

Responsibilities:

• Assess cloud security technologies for security gaps and weaknesses according to industry standards.
• Review cloud security body of evidence packages for completeness and accuracy.
• Facilitate TEMs with cloud service providers to review cloud service architectures.
• Provide project management support including project planning, task tracking, milestone management, and resource coordination.

Technical Requirements:

• Manage security assessment, security compliance, change management, and continuous monitoring activities, including associated program management functions, across four (4) CSPs: AWS, Google Cloud, Oracle Cloud, and Microsoft Azure.
• Assess cloud security technologies for security gaps and weaknesses according to industry standards.
• Analyze security scan findings and perform risk analysis on the findings.
• Review cloud security body of evidence packages for completeness and accuracy.
• Collaborate with other internal components and security peers to determine security and potential weaknesses of cloud infrastructure and cloud services.
• Advise Sponsor leadership on cloud security services.
• Analyze system alerts to determine if a security weakness exists and document risk mitigation procedures.
• Sustain and evolve the Sponsor's standard operating procedures to meet Program Objectives.
• Facilitate technical exchange meetings (TEMs) with cloud service providers to review cloud service architectures.
• Provide program management support including project planning, task tracking, milestone management, and resource coordination.
• Develop and maintain program metrics and performance indicators including security assessment completion rates, finding remediation timelines, compliance status dashboards, and other KPIs as directed by the Sponsor.
• Respond to Sponsor inquiries and requests for information within established timelines, providing accurate and complete technical and programmatic information.
• Prepare periodic program highlights, status reports, and briefing materials for Sponsor leadership.
• Support ad hoc taskings from the Sponsor including research, analysis, documentation, and coordination activities.
• Maintain regular communications with the Sponsor through scheduled status meetings, written reports, and other communication channels.

Required Skills:

• Facilitating TEMs with cloud service providers to review cloud service architectures
• Active Security Clearance with Polygraph.
• Maintaining A&A packages across multiple services/systems in accordance with FIPS-199, NIST 800-53, and CNSS 1253
• Designing, implementing, assessing or reviewing systems utilizing cloud technology with AWS, Oracle Cloud, Google Cloud, or Microsoft Azure
• Utilizing or reviewing cross domain technology and common architecture designs
• Continuous monitoring requirements including scan analysis with tools such as Rapid 7, Nessus, and Qualys
• Creating, monitoring, or closing POA&Ms
• Utilizing compliance tools such as Xacta 360, Risk Vision, RSA Archer
• Common control provider concept within the NIST RMF
• Security control assessments including working with SCAs and preparing security packages
• Information system security engineering activities
• Project management including planning, task tracking, milestone management, and resource coordination
• Developing and maintaining program metrics, performance indicators, and compliance status dashboards
• Preparing technical reports, program highlights, status briefings, and leadership communications

Desired Skills:

• Using the Sponsor's or IC element A&A process
• Creating or reviewing A&A body of evidence documentation in a cloud security environment
• Identifying, implementing, or reviewing appropriate information security controls
• Working in Xacta 360
• Experience with Sponsor's A&A tools

What's in It for You?

Flexible work environment

A team mentality - work with friendly, like-minded professionals

Work with innovative, cutting edge technologies

Enjoy extremely competitive compensation and benefits

A work-life balance you can count on

Opportunities to grow and advance your career on our dime

The Benefits You Get with Freedom

Amazing benefits including matching 401k, fully paid medical, and more

Generous paid time off - including paid site closure days

Competitive salary offerings

Paid training and tuition reimbursement

Fully paid life and disability

Company sponsored events (game nights, holiday party, summer party, happy hours)

As an Equal Opportunity Employer, we do not discriminate on the basis of race, color, religion, sex, age, marital status, disability or veteran status

Equal Opportunity Employer, including disabled and veterans.