Cloud Security Engineer

Convergenz

Full-time - Mid Level

Administrative and Support Services

About the position

The Cloud Security Engineer will play a crucial role in the DevSecOps practice, focusing on delivering secure cloud architectures for migration, optimization, and deployment. This position requires a blend of cloud platform services expertise, cybersecurity knowledge, and DevOps practices, with an emphasis on infrastructure as code and automation.

Responsibilities

• Identify and implement secure cloud-based solutions, including zero-trust architectures and identity management policies.
• Understand stakeholder needs and optimize security solutions for usability.
• Monitor cloud environments for suspicious activities and investigate security incidents.
• Examine infrastructure as code for risk analysis.
• Ensure systems are secure against cybersecurity threats through risk assessment and compliance with industry standards.
• Identify technical problems, perform root cause analysis, and develop updates and fixes.
• Automate security processes such as vulnerability and patch management.
• Collaborate with software developers and DevSecOps engineers to ensure security processes are followed.
• Support enterprise cloud security through infrastructure as code and automated configurations.
• Design and implement data protection and encryption mechanisms for data at rest and in transit.
• Document the current state of the environment, perform gap analysis, and produce recommendations.
• Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues.
• Act as an individual contributor and mentor junior team members.
• Engineer and implement solutions for continuous improvement of services.
• Present regular status updates and provide cross-training to team members.

Requirements

• Ability to obtain a U.S. government Security Clearance
• BS Degree in an IT field or BS in a non-IT field with 2 years related IT experience
• 5+ years of total experience
• 3 years of experience architecting, designing, developing, and implementing cloud solutions
• 3 years of experience with one or more clouds (AWS, Azure, or GCP)
• 3 years of experience with Git SCM providers (GitHub, GitLab, Bitbucket)
• 3 years of experience in an Agile environment
• 3 years of experience implementing infrastructure as code and orchestration
• 3 years of experience conducting monitoring, risk assessment, threat modeling, and security testing in cloud environments
• 3 years of experience documenting POAMs, SSPs, and A&A support documentation
• Experience with Azure and GCP

Nice-to-haves

• AWS Certified Security Specialty
• AWS Certified Solution Architect Associate
• Microsoft Certified Azure Administrator Associate
• Certified Information Systems Security Professional (CISSP)
• Excellent written and verbal communication skills
• Experience with documenting the as-is state of the environment and performing gap analysis
• Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby
• Experience with automation tools (Pivotal, Chef, Terraform, CloudFormation, Ansible)