SAIC is eeking a highly experienced Lead Cloud Security Engineer who is a Netskope Subject Matter Expert to design, engineer, implement, and secure cloud-based environments supporting complex enterprise and federal government missions. The ideal candidate will combine strong hands-on cloud engineering capabilities with deep expertise in cloud security, Zero Trust, SASE/SSE, security architecture, automation, and federal cybersecurity compliance.
The Lead Cloud Security Engineer will serve as a senior technical authority responsible for translating security requirements and architectural objectives into secure, scalable, and operational cloud solutions, focused on implementing technology provided by Netskope. This individual will work across cloud infrastructure, networking, cybersecurity, DevSecOps, identity-centric security, and compliance teams to implement and continuously improve enterprise security capabilities.
Key Responsibilities
- Design, engineer, implement, and maintain secure infrastructure and security architectures, including access to on premise and cloud applications.
- Engineer and troubleshoot Software Defined Networking integrating Netskope and Cisco platforms.
- Develop and implement cloud security architectures based on Zero Trust principles, including identity-centric access controls, segmentation, and Zero Trust Network Access (ZTNA).
- Design and implement SASE/SSE security capabilities, including Secure Web Gateway (SWG), Cloud Firewall, Private Access, and Data Loss Prevention (DLP).
- Integrate cloud security controls into DevSecOps and automated deployment workflows.
- Develop technical architecture documentation, design documentation, implementation plans, test plans, standard operating procedures, and other engineering artifacts.
- Translate cybersecurity policies, security controls, and compliance requirements into implementable technical solutions.
- Troubleshoot complex cloud, network, security, and application connectivity issues.
- Work with cybersecurity, network, cloud, application, and infrastructure teams to identify and resolve security and architecture issues.
- Lead technical evaluations, proof-of-concepts, pilots, testing, and phased enterprise deployments.
- Provide technical leadership and mentoring to engineers and other technical personnel.
- Serve as a senior technical SME to customers, program leadership, security stakeholders, and engineering teams.
Required
- BS and 14+ years of professional experience in cybersecurity, cloud engineering, proxy, network security, security architecture, or a closely related field.
- Ability to obtain and maintain a Public Trust requiring U.S. Citizenship.
- 5+ years of hands-on experience with Netskope/Blue Coat/Zscaler designing, implementing, or securing cloud environments.
- Demonstrated experience serving in a prior role as a Security Architect, Cloud Architect, Network Architect, or Network Engineering Lead, with responsibility for designing and implementing secure enterprise infrastructure in complex environments.
- Demonstrated experience with Zero Trust security architectures and/or ZTNA.
- Experience with cloud networking and security, including VPCs, network segmentation, routing, firewalls, and secure connectivity.
- Experience translating cybersecurity requirements into technical architecture and engineering solutions.
- Experience producing technical architecture and engineering documentation.
- Experience troubleshooting complex cloud and network security issues.
- Experience providing technical leadership to engineering teams and serving as a customer-facing technical SME.
- Experience leading technical pilots, demonstrations, proof-of-concepts, and phased deployments.
Preferred Qualifications
- Experience supporting U.S. Department of Defense (DoD) or large federal civilian environments, working with security and engineering stakeholders. Experience developing or implementing security automation and/or Infrastructure as Code (IaC).
- Certified Netskope Engineer, with Direct experience implementing Netskope or comparable SASE/SSE platforms in large government organizations.
- Cisco Certified Network Associate or higher.
- Experience leading enterprise-scale cloud security deployments.
- Experience with NIST 800-53, RMF, CDM, STIG, DIACAP, or comparable federal security frameworks.
- Experience with Splunk, NetWitness, SolarWinds, Wireshark, or comparable security/network monitoring tools.
- Experience with Docker, Kubernetes, MicroK8s, or other container technologies.
- Experience developing automated troubleshooting, diagnostics, reporting, or security operations workflows.