Multi-Cloud Security & Compliance Engineer

Location: Washington, DC

Department: 54589947 - AFS Cloud Platform Engineering

Responsible for securing our Oracle Cloud Infrastructure (OCI) and Google Cloud Platform (GCP) environments. This role involves establishing and enforcing a unified security posture across OCI and GCP, overseeing permissions boundaries with Zero-Trust in mind, configuring centralized security monitoring, and ensuring all cloud deployments meet stringent federal compliance and security requirements, including FedRamp HIGH, FISMA and NIST 800-53.

Unified Security Posture

• Establish and enforce an integrated security posture spanning both GCP and OCI environments.
• Define security guardrails, standard configurations, and baseline security controls to ensure consistency across all cloud workstreams.

Identity Federation & Access Governance

• Manage and maintain identity federation between cloud environments, ensuring seamless, secure authentication and authorization flows.
• Implement and optimize IAM policies, role structures, and least‑privilege access controls across multi‑cloud deployments.

Centralized Security Monitoring

• Configure and operate centralized security monitoring solutions (e.g., GCP Security Command Center) to unify threat detection, vulnerability visibility, and compliance tracking across clouds.
• Integrate logs, alerts, and telemetry into enterprise monitoring systems to enable proactive incident response.

VA Compliance & Regulatory Alignment

• Ensure all deployments meet Department of Veterans Affairs (VA) compliance and security requirements, including relevant federal standards and program‑specific directives.
• Partner with security, governance, and audit teams to validate adherence to VA policies throughout delivery lifecycle stages.

Risk Management & Remediation

• Identify vulnerabilities, policy deviations, and architectural risks across cloud platforms.
• Recommend and implement remediation actions, ensuring continuous improvement of security posture.

Cross‑Team Collaboration

• Work closely with cloud engineering teams (OCI Migration, GCP Foundations, Data & AI) to embed secure‑by‑design principles throughout architectures and deployments.
• Provide subject matter expertise during design reviews, threat modeling discussions, and release planning.

Here's what you need:

• 5+ years in cloud security engineering, enterprise security architecture, or compliance programs.
• 3+ years of experience leading technical teams to achieve objectives and outcomes.
• Proven ability to establish and maintain a unified security posture across multiple cloud service providers.
• Experience configuring and managing centralized cloud-native logging, anomaly detection, and security monitoring solutions.
• Skilled in implementing and managing vulnerability scanning workflows for compute instances and container images.
• Experience implementing security controls for cloud databases, including data masking, risk assessment, and activity auditing.
• Bachelor's Degree in computer science, engineering, accounting/finance, information systems, or technical discipline.