Cloud Security Engineer

Steampunk - McLean, VA

Full-time - Mid Level

McLean, VA

Food Services and Drinking Places

About the position

As a Cloud Security Engineer at Steampunk, you will be integral to our DevSecOps practice, focusing on delivering secure cloud architectures for migration, optimization, and deployment. This role emphasizes the importance of human-centered design in creating impactful solutions while ensuring compliance with cybersecurity standards. You will work collaboratively with stakeholders to implement secure cloud solutions, monitor environments for threats, and mentor junior team members.

Responsibilities

• Identify and implement secure cloud-based solutions including zero-trust architectures and identity management policies.
• Optimize solutions that balance security with usability based on stakeholder needs.
• Monitor cloud environments for suspicious activities and investigate security incidents as necessary.
• Examine infrastructure as code for risk analysis.
• Conduct risk assessments, threat modeling, and ensure compliance with industry standards.
• Identify technical problems, perform root cause analysis, and develop updates and fixes.
• Automate security processes such as vulnerability and patch management.
• Collaborate with software developers to ensure adherence to security processes.
• Support enterprise cloud security through infrastructure as code and automated configurations.
• Design and implement data protection and encryption mechanisms for data at rest and in transit.
• Document the current state of the environment and produce recommendations based on gap analysis.
• Identify and resolve infrastructure vulnerabilities and application deployment issues.
• Act as an individual contributor and mentor junior team members.
• Engineer and implement solutions for continuous improvement of services provided.
• Present regular status updates and provide cross-training to team members.

Requirements

• Ability to obtain a U.S. government Security Clearance
• BS Degree in an IT field or BS in a non-IT field with 2 years related IT experience
• 5+ years of total experience
• 3 years of experience architecting, designing, developing, and implementing cloud solutions
• 3 years of experience with one or more cloud platforms (AWS, Azure, GCP)
• 3 years of experience with Git SCM providers (GitHub, GitLab, Bitbucket)
• 3 years of experience in an Agile development environment
• 3 years of experience implementing infrastructure as code and orchestration
• 3 years of experience conducting monitoring, risk assessment, threat modeling, and security testing in cloud environments
• 3 years of experience documenting POAMs, SSPs, and A&A support documentation
• Experience with Azure and GCP

Nice-to-haves

• AWS Certified Security Specialty
• AWS Certified Solutions Architect Associate
• Microsoft Certified Azure Administrator Associate
• Certified Information Systems Security Professional (CISSP)
• Excellent written and verbal communication skills
• Experience with documenting the as-is state of the environment and performing gap analysis
• Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby
• Experience with automation tools like Pivotal, Chef, Terraform, CloudFormation, or Ansible

Benefits

• Competitive salary range of $110,000 to $155,000
• Employee ownership
• Diversity and inclusion initiatives
• Professional development opportunities
• Flexible work environment