Innova Solutions USA - Manassas, VA
posted 4 months ago
Innova Solutions is seeking a skilled Cloud Security Engineer to join our team in Manassas, VA. This full-time contract position is expected to last until December 2024, with the possibility of extension. The ideal candidate will possess extensive experience in cloud security, particularly with Public Key Infrastructure (PKI), AWS, Terraform, and Key Management Services (KMS). The primary focus of this role will be to design, implement, and maintain robust security solutions that protect our cloud infrastructure and applications from potential threats. The Cloud Security Engineer will be responsible for developing and enforcing cloud security policies, standards, and best practices. This includes designing and implementing security measures for AWS environments, such as configuring Virtual Private Clouds (VPCs), Identity and Access Management (IAM) policies, and security groups. The role also requires utilizing Terraform to automate and manage secure cloud infrastructure deployments. In addition to cloud security design, the engineer will implement and manage PKI systems to ensure secure communication and authentication. This involves configuring and maintaining certificate authorities, managing digital certificates, and overseeing the certificate lifecycle management process. Compliance with industry standards and regulatory requirements is crucial in this aspect of the role. The engineer will also manage AWS KMS to safeguard encryption keys used in data protection, developing and implementing key management policies and procedures while monitoring and responding to key-related security incidents. Furthermore, the role includes developing custom security solutions and tools to address specific cloud security challenges, integrating security practices into the CI/CD pipeline, and automating security operations and incident response through scripting and coding. Conducting security assessments and vulnerability scans to identify potential risks is another key responsibility. The engineer will collaborate with other teams to address and resolve security issues, ensuring that cloud security practices comply with relevant regulations and industry standards such as GDPR and HIPAA. The role also involves preparing and presenting security reports and documentation to stakeholders, conducting audits, and maintaining incident response plans and procedures to effectively respond to security incidents and breaches.