Cloud Security Engineer Senior

Location: Leesburg, VA

Department: 60024445 - AFS Cyber Mission

Who you'll be:

Provides comprehensive security engineering and sustainment support for the Agency's cloud, hybrid-cloud, and on-premise environments, ensuring optimal coverage, performance, and adherence to federal security standards and industry best practices. The role architects, deploys, and sustains secure baselines and configurations across CSD's cloud and on-premise systems, and maintains the SOPs, architectural diagrams, and system-controls documentation that support those environments. It builds and operates continuous monitoring capability spanning system availability, performance, security, and incident reporting, while also monitoring cloud expenditures and recommending cost-optimization actions to Government leadership. As the team's cloud security SME, the role additionally supports audits, change/configuration management, and knowledge-transfer training to sustain the environment's security posture over time.

What you'll do:

• Architect, engineer, deploy, and sustain secure, resilient, cost-effective cloud/hybrid-cloud/on-premise applications and systems; review and approve architectural designs for secure implementation.
• Develop, deploy, and maintain secure baselines for all CSD cloud and on-premise systems in accordance with federal mandates and organizational policy.
• Create and maintain SOPs, policies, architectural diagrams, code documentation, security baselines, and system controls documentation.
• Ensure comprehensive log collection/aggregation for monitoring, analysis, and compliance; continually optimize logging/monitoring to reduce noise and improve performance.
• Develop and maintain continuous monitoring capability covering system availability, performance, security, reporting, and response.
• Monitor cloud expenditures and provide leadership with cost-optimization recommendations; administer/operate/secure the hybrid-cloud monitoring tool suite.
• Conduct market research on new security solutions to prevent obsolescence; report cybersecurity incidents per federal regulation.
• Support audits of applications, systems, and services; serve as SME sustaining current cloud security knowledge and delivering training/knowledge-transfer.
• Manage access requests, change-impact analysis, and root-cause analysis for the hybrid-cloud environment; develop/maintain the ticketing/service-desk system.

What you need:

• 7 years of experience in system administration, database administration, network engineering, software engineering, or software development with a concentration in Cyber Security; or, with a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field, 5 years of such experience.
• AWS Certified Security – Specialty
• AWS Certified SysOps Administrator
• AWS Certified Solutions Architect – Associate
• AWS Certified DevOps Engineer – Professional (for engineers with SecDevOps responsibilities)
• AWS Certified Advanced Networking – Specialty (for engineers with network security responsibilities)