SENIOR CLOUD SECURITY ENGINEER/TECHNICAL ADVISOR WITH SECURITY CLEARANCE

Keenlogic - Arlington, VA

Full-time - Senior

Remote - Arlington, VA

Professional, Scientific, and Technical Services

About the position

KeenLogic is seeking to hire a Senior Cloud Engineer (Azure/AWS Technical Advisor) to join our team at the Drug Enforcement Administration. As a Cloud Security Engineer, you will play a crucial role in designing, implementing, and maintaining security measures to protect an organization's cloud-based infrastructure and data. This role requires a deep understanding of cloud technologies, security best practices, and a proactive approach to identifying and mitigating security risks. Cloud Security Engineers use technical guidance and engineering best practices to securely build and scale cloud-native applications and configure network security defenses within the cloud environment. These individuals are proficient in identity and access management (IAM), using cloud technology to provide data protection, container security, networking, system administration, and zero-trust architecture. Cloud Engineers must have a comprehensive knowledge of FISMA, NIST, NSA, and other information security, cybersecurity, UAM, and CDM-related industry policies, standards, procedures, guidelines, best practices, developing, engineering, implementing, testing, evaluating, configuring, monitoring, and maintaining cybersecurity, UAM, CDM, insider threat detection/analysis incident detection/analysis, and vulnerability compliance and assessment software and hardware. Personnel assigned to this role will serve primarily on the ISSO as a Service (ISSaaS) team. The designated contract team member for the ISSO as a Service (ISSaaS) team is considered Key Personnel. This is a full-time position offering Fortune 500-level benefits, PTO, 401k, and Life Insurance, and monthly reimbursement for travel. This position is based in Arlington, VA and follows a 3x2 schedule, 3 days a week onsite and 2 days of remote work.

Responsibilities

• Design and implement secure cloud architecture for various cloud platforms (AWS, Azure, & GCP)
• Collaborate closely with architects and developers to ensure security is integrated into the entire cloud environment
• Implement and manage security monitoring tools for cloud environments
• Respond to and investigate security incidents, providing timely resolution
• Ensure cloud environments comply with industry standards and regulations
• Implement and monitor governance frameworks for cloud security
• Develop and maintain scripts or automation tools for security tasks
• Implement DevSecOps practices to integrate security into the CI/CD pipeline
• Conduct regular vulnerability assessments and coordinate remediation efforts
• Keep abreast of emerging threats and vulnerabilities in cloud environments
• Maintain all documentation
• Support and develop automation
• Develop in languages such as Bash, PowerShell, Python
• Maintain/enhance knowledge of related (AWS / Azure / GCP / OCI) cloud services
• Monitor and tune the cloud systems to achieve optimum performance levels
• Propose and implement cloud infrastructure transformation and automation based on customer requirements
• Assist in building, troubleshooting, and optimizing container-based cloud infrastructure
• Assist in selecting, implementing, and tuning configuration management (CM) technology platforms
• Assist in ensuring operational readiness for launching secure and scalable workloads into public and hybrid cloud environments
• Work to validate existing infrastructure security, performance, and availability and make recommendations for improvements and optimization
• Collaborate with application developers and database administrators to deliver creative solutions to difficult technology challenges and business requirements

Requirements

• Active Secret clearance
• Must be eligible for Top-Secret clearance
• Master's degree in Computer Science, Information Systems, or Information Technology Engineering, Information Technology Management, Business Management, or task order specific discipline or related field, equivalent work experience or equivalent educational and/or qualifications
• Ten years of documented relevant work experience
• Certifications: DoD IAT, IASAE, or CSSP Level II or III or equivalent
• 10+ years of experience in any combination of cloud cybersecurity, cloud security engineering, and/or cybersecurity experience
• Experience in network, system, software, and/or cloud architecture; design, implementation, support, and evaluation of security-focused tools and services

Nice-to-haves

• Any combination of security engineering experience in the following areas: AWS GOV Cloud, SPLUNK, tools (CORE, SOAR, ES, UBA), SIEM, Azure Cloud, Kubernetes, Docker, Rancher, Linux, or Windows command line experience
• Familiarity with CloudFormation, EC2, EMR, S3, Redshift, RDS, SQS and AutoScaling Groups, and container orchestration
• AWS Certified Cloud Practitioner, AWS Certified Solutions Architect - Professional, AWS DevSecOps Engineer, AWS Solutions Architect Associate, AWS Security Specialty
• Azure Fundamentals, Azure Data Fundamentals, Azure Ai Fundamentals, Azure Security Engineering Associate, Azure Solutions Architect Expert
• Google Associate Cloud Engineer
• Cloud Security Alliance: Certificate of Cloud Security Knowledge (CCSK)
• SANS Institute Certification SEC541: Cloud Security Attacker Techniques, monitoring, and threat detection
• SANS Institute Certifications: SEC 488: Cloud Security Essentials, SEC 540: Cloud Security and DevSecOps Automation, SEC 388: Introduction to Cloud Computing and Security

Benefits

• Fortune 500-level benefits
• Paid Time Off (PTO)
• 401k
• Life Insurance
• Monthly reimbursement for travel