REQUIRES AN EXISTING/ACTIVE TS/SCI WITH CI POLYGRAPH - NO REMOTE WORK, MUST WORK ON SITE
Location: Reston, VA or Washington, DC
Funding Status: Contingent
Position Overview
DAn Solutions is seeking a Mid-Level Cloud Security Engineer to support the security engineering, assessment, documentation, and accreditation of mission-critical IT and cloud environments.
The Cloud Security Engineer will evaluate security requirements and risk, develop and implement cloud security architectures and controls, and support Information Assurance and compliance activities across on-premises, cloud, and hybrid environments.
Key Responsibilities
- Support security documentation, validation, assessment, and accreditation activities for IT systems.
- Evaluate systems against organizational Information Assurance (IA) and security requirements.
- Assist in defining desired security states and organizational risk thresholds.
- Analyze current environments to identify compliance gaps and security risks.
- Support development of security doctrine, policies, procedures, and technical guidance.
- Evaluate applications, software, and specialized utilities for adherence to software assurance best practices.
- Research and recommend security tools and capabilities appropriate for on-premises, cloud, and hybrid environments.
- Design and implement cloud security architectures, tools, controls, and processes.
- Develop and evaluate security documentation, including:
- System Security Plans
- Contingency Plans
- Security Procedures
- Continuity of Operations Plans
- Conduct security architecture evaluations and provide technical guidance and troubleshooting.
- Support Risk Management Framework (RMF) activities.
- Work within Agile development and engineering environments.
- Collaborate with Government/IC customers and technical teams to ensure security standards and requirements are met.
Required Qualifications
- 5+ years of hands-on experience building and administering cloud environments.
- Experience using cloud-native functionality as well as COTS, GOTS, and open-source technologies.
- Knowledge of Infrastructure as Code technologies and concepts, including Terraform, CloudFormation, or Bicep.
- Experience developing and evaluating security documentation.
- Experience performing security architecture evaluations, developing technical guidance, and troubleshooting.
- Experience with Risk Management Framework (RMF).
- Experience working within an Agile development environment.
Education & Experience
Candidates must meet one of the following:
- High School Diploma/GED + 7 years supporting IT projects and activities
- Associate's Degree + 5 years
- Bachelor's Degree + 3 years
- Master's Degree + 1 year
Preferred Qualifications
- Experience with the Software Development Life Cycle (SDLC).
- Strong team leadership and client-relationship skills.
- Strong interpersonal skills.
- Excellent written and verbal communication skills.
Certification Requirements
- Ability to obtain an approved DoD 8570 CSSP-IS certification within 30 days of offer acceptance, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
- Ability to obtain an approved IAT Level III certification within 45 days of the CSSP-IS date, or within 45 days of offer acceptance if CSSP-IS is already held. Qualifying certifications include SecurityX, CCNP Security, CISA, CISSP/Associate, GCED, GCIH, or CCSP
Salary Range Disclaimer: The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications