Apply on Employer Site

Booz Allen Hamilton · 9 hours ago

Cloud Security Engineer

Alexandria, VA

Full-time

Hybrid

Mid, Senior Level

$78K/yr - $176K/yr

4+ years exp

Booz Allen Hamilton is a leading provider of management and technology consulting services. They are seeking a Cloud Security Engineer to define and implement cybersecurity processes for AWS and Azure environments, ensuring compliance with security standards and supporting authorization activities.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Define, communicate, and implement cybersecurity architecture and administration processes for Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains

Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains

Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages

Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks

Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements

Support data capture and configuration within tools to enable achievement of the organization’s Assessment and Authorization (A&A) objectives

Work without considerable direction

Mentor and supervise team members, as needed

Qualification

AWSAzureRisk Management FrameworkDevSecOpsPowerShellBashMicrosoft SentinelMicrosoft DefenderRed Hat Enterprise LinuxGITCommunicationTeam collaborationIndependent work

Required

4+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans

4+ years of hands-on experience with secure IT architecture and computing hardware and software

Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service

Experience with Microsoft Sentinel and Defender for incident monitoring and endpoint security

Experience with scripts and PowerShell, and Bash to provide automated scanning or monitoring solutions

Experience supporting security reviews of software and system releases within a DevSecOps framework, supporting recurring path-to-production software and system release activities

Experience with terminology, processes, and regulations of IT system A&A for the RMF

Top Secret clearance

HS diploma or GED

Ability to obtain DoD Directive 8570 or 8140 Series IAT Level II Certification within 90 days of hire date