Senior Cloud Security Engineer

Steampunk - McLean, VA

Full-time - Senior

McLean, VA

Food Services and Drinking Places

About the position

The Senior Cloud Security Engineer at Steampunk will play a crucial role in the DevSecOps practice, focusing on delivering secure cloud architectures for various cloud-related projects. This position requires a blend of technical expertise in cloud services, cybersecurity, and DevOps practices, with an emphasis on creating secure, efficient, and user-friendly solutions for clients in the federal government sector.

Responsibilities

• Identify and implement secure cloud-based solutions, including zero-trust architectures and identity management policies.
• Understand stakeholder needs and optimize solutions that balance security with usability.
• Monitor cloud environments for suspicious activities and investigate security incidents as necessary.
• Examine infrastructure as code for risk analysis and compliance.
• Ensure systems are secure against cybersecurity threats through risk assessment and compliance with industry standards.
• Identify technical problems, perform root cause analysis, and develop updates and fixes.
• Automate security processes such as vulnerability and patch management.
• Collaborate with software developers and DevSecOps engineers to ensure adherence to security processes.
• Support enterprise cloud security through infrastructure as code and automated configurations.
• Design and implement data protection and encryption mechanisms for data at rest and in transit.
• Document the current state of the environment, perform gap analysis, and produce recommendations.
• Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues.
• Act as an individual contributor and mentor junior team members.
• Engineer and implement solutions for continuous improvement of services.
• Present regular status updates and provide cross-training to team members.

Requirements

• Ability to obtain a U.S. government Security Clearance
• BS Degree in an IT field or BS in a non-IT field with 2 years related IT experience
• 5 years of experience architecting, designing, developing, and implementing cloud solutions
• 5 years of experience with one or more cloud platforms (AWS, Azure, GCP)
• 5 years of experience with Git SCM providers (GitHub, GitLab, Bitbucket)
• 5 years of experience in Agile systems development
• 5 years of experience implementing infrastructure as code and orchestration
• 5 years of experience in monitoring, risk assessment, threat modeling, and security testing in cloud environments
• 5 years of experience documenting POAMs, SSPs, and A&A support documentation
• Experience with AWS and GCP

Nice-to-haves

• AWS Certified Security Specialty
• AWS Certified Solutions Architect Associate
• Microsoft Certified Azure Administrator Associate
• Certified Information Systems Security Professional (CISSP)
• Excellent written and verbal communication skills
• Experience with documenting the as-is state of the environment and performing gap analysis
• Experience with scripting in Concourse, Bash, PowerShell, Python, Groovy, or Ruby
• Experience with automation tools like Pivotal, Chef, Terraform, CloudFormation, or Ansible

Benefits

• Competitive salary range of $130,000 to $180,000
• Employee ownership
• Opportunities for professional development
• Diversity and inclusion initiatives
• Flexible work environment