Senior Cyber Security Cloud Engineer - Security Clearance Required
Description
SAIC Engineering is seeking a highly experienced and energetic Senior Cyber Security Cloud Engineer to join our SAIC Engineering team supporting the Cloud One program under the Air Force Lifecycle Management Center Office for Network Integration (AFLCMC / HNI).
The Cloud One Common Computing Environment is an existing global, interconnected, virtualized, hybrid, and IT infrastructure hosting mission systems, applications, services, and data that will serve the U.
S. Air Force (USAF) and U.S. Army (USA). Cloud One incorporates the capabilities of commercial cloud and Managed Service Providers (MSP) residing in Cloud Service Providers (CSPs).
Cloud One facilitates the USAF and USA’s efforts to migrate applications to a cloud environment. The Senior Cyber Security Cloud Engineer will focus on Architecture, implementation, and management of security in a multi Cloud Environment.
The overarching focus of this position is to support the engineering team as solutions are engineered to support Cloud One enhancement efforts, designing the Security components of these engineering efforts that maintain the security posture mandated by Cloud One’s Authority to Operate.
In Support of the SAIC Chief Engineer, the Cyber Security Engineer Principle is responsible for responsive and coherent planning, development, and delivery of assessments of systems and requested changes within the Cloud One environments to identify where those systems and changes deviate from acceptable configurations, enclave policy, or local policy and provide appropriate recommended solutions to meet those requirements.
This position is 100% remote.
Job Responsibilities :
Design security architectures; recommend integration of new architectural features into existing infrastructures; design cybersecurity architectural artifacts;
provide architectural analysis of cybersecurity features and relate existing system to future needs and trends; provide engineering recommendations and resolve integration and testing issues.
Apply a combination of expert engineering knowledge of enterprise IT and security solutions to design, develop or review proposed solutions to ensure they are consistent with enterprise architecture security policies and support full spectrum military cyberspace operations.
Design and develops new or reviews proposed security control design and solution planning at the system, mission, and enterprise level, security-in-depth / defense-in-depth, and other related IAM / ISSO / ISSE support functions.
Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
Perform assessments of RMF artifacts and identify where those artifacts deviate from RMF control requirements.
Review and ensure strict program control processes to ensure mitigation of risks and support obtaining assessment and authorization of systems.
Includes support of process, analysis, coordination, control certification test, compliance documentation, as well as investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
Provide security engineering supporting DoD / Federal cybersecurity policy (i.e., DoDI 8500.01, NIST SP 800-53, etc.).
Problem Complexity : Develops technical solutions to complex problems which require the regular use of ingenuity and creativity.
Impact : Guides the successful completion of major programs. Erroneous decisions or recommendations would typically result in failure to achieve major organizational objectives.
Liaison : Represents SAIC Engineering as the Cyber technical contact on engineering and architecture projects. Interacts with senior external personnel on significant technical matters often requiring coordination between organizations.
Work with the government to implement and evolve phased ATO process for the environment using A&A automation and maximize the use of inheritance / reciprocity
Develop approaches support strong authentication and multi-factor authentication to implement data access authorization based on user identity
Evaluate and provide recommendation methods of verification of the applicable DISA STIG, SRGs, and best practices
Provide Tier 3 Cyber Security Service Provider (CSSP) support, as well as interface with and meet requirements of the Tier 2 CSSP support providers
Ability to provide timely remediation recommendations for audit findings
Ability to support POA&M reviews and recommendations
Ability to support Code Review Security Vulnerabilities Remediation
Ability to support the updates to Risk Management Framework Artifacts
Qualifications
Required Qualifications :
Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more experience.
In lieu of a degree additional years of experience will be considered
Minimum Information Assurance System Architecture and Engineering (IASAE) Level III certified IAW DoD 8570.01M replaced by DoDD 8140
Compliant with DoD and USAF training requirements in DoDD 8570.01, DoD 8570.01-M, and AFMAN 17-1303.
- Knowledge of DoD Policies and procedures including DoD 8500.01 and DoD 8510.01
- Experience with DoD suite of security tools including Assured Compliance Assessment Solution (ACAS) Experience (Nessus / Tenable Security Center)
- Experience evaluating STIG / SCAP compliance scanning and implementation
- 5+ years of experience as a Cyber Cloud Engineer supporting cloud environments preferably AWS and Azure
- Experience evaluating and configuring AWS and Azure Security Services
Experience with Risk Management Framework (RMF) and updating of security artifacts
Experience with compliance verification methods including DISA STIG, SRGs, and best practices
Experience with DevSecOps
Knowledge of the DoD suite of security tools including HBSS, and eMASS
Knowledge of cloud environments provided by AWS, Azure, OCI or GCP
Working knowledge of Microsoft Office Suite including Microsoft Visio
Desired Qualifications :
Experience with ORCA Security Suite of tools
- Experience with Okta Employee and Customer Identity Solutions
- Experience with Windows Server Update Services (WSUS)
- Experience with Oracle and Google Cloud Environments
- Knowledge of DoD Enterprise Service Management Framework (DESMF)
Certified Information Systems Security Professional (CISSP) certification preferred
Experience with Agile, Scrum, SAFe or other modern software development methods / practices
Experience supporting Cloud migration effort
Required Clearance :
- Interim Secret clearance required to start; Ability to obtain a Secret clearance is required to maintain employment.
- US citizenship required
Target salary range : $125,001 - $150,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.
SAIC accepts applications on an ongoing basis and there is no deadline.
Covid Policy : SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.
Data Engineer - Security Clearance Required
Top Secret Security Clearance with SCI eligibility. This role will be responsible for delivering automation to key national security missions interacting with petabyte-scale data on supercomputing resources. In this role, you will construct data analytical infrastructure, data engineering, data mini...
Civil Engineer Director - Maxwell AFB (able to obtain and maintain a Secret Clearance) - Security Clearance Required
Bachelor’s degree in engineering required, master’s degree in engineering or business administration desired. Serves as the senior engineer representative/liaison for synthesizing and delivering construction, design and operations information to Air Force customer. Verifies all required project docu...
Security Architect - Security Clearance Required
Leads and assists in the delivery of cyber security and IT security engineering projects. Creates security architecture standards for adoption of new technology. Identifies, quantifies, and recommends mitigation actions for security risks as they relate to enterprise projects. Produces management re...
Program Manager - Systems Engineering, Integration, & Test - Security Clearance Required
Secret clearance and eligibility for Top Secret/SCI/SAP/SAR clearance, an advanced STEM degree, and over 14 years of experience in Engineering or Program Management, with a track record of leading system engineering tasks for large-scale weapon systems. KBR Government Solutions core capabilities inc...
Construction Program Analyst – TS Clearance required. - Security Clearance Required
The Construction Program Analyst – Entry Level will work under the general direction of a Project Manager and/or Contracting Officer’s Representative to support construction, design/build, architecture, and engineering projects. Carry out administrative tasks as required to facilitate an efficient w...
System Security Engineer
We are seeking a System Security Engineer who will develop and demonstrate system security and hardware engineering analysis. This can include system failure analysis, full systems engineering, FPGA/ASIC/Digital Design, Semiconductor manufacturing, and anti-tamper solutions to address global securit...
Sr. Information Security Analyst-Cyber Incident Response (CIRT)
Experience responding to cyber events in public cloud environments such as AWS, Azure, Google Cloud, etc. The Cyber Incident Response Analyst is responsible for responding to both existing and emerging threats, as well as identifying attacker tools, tactics, and procedures by analyzing data from a v...
Full Stack Developer (U.S. Security Clearance Eligibility Required)
Candidates must be eligible to obtain Secret Security Clearance. Work using scrum agile methodologies with Engineers and Product Owners to develop creative data-driven solutions that meet business and technical initiatives. Familiar working in Development, Security, and Operations (DevSecOps) and Co...
Armed Flex Officer
Security Engineers is actively seeking Security Officer applicants who are interested in a career in the private security industry. Security Engineers is a contract security provider that operates in numerous States. The backbone of Security Engineers is our team of professional Security Officers. A...
Senior Information System Security Officer
Hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP), Global Information Security Professional (GISP), or the CompTIA Advanced Security Practitioner (CASP) or other certifications exemplifying skill sets such as those described in DoD Instruc...