AWS Security Engineer

AWS Security Engineer

The Opportunity:

Would you like to implement innovative AWS computing solutions and help the company solve complex technical problems in support of the government clients? Do you have a deep passion and desire to be a part of building secure and compliant AWS cloud computing infrastructure to grow our business?

This is an exciting opportunity to use the latest cloud computing technologies to help U.S. government agencies implement innovative cloud computing solutions and solve technical problems. Booz Allen has established an independent and secure AWS-based Platform as a Service (PaaS) called SmartBASE to support Internal Revenue Services (IRS) clients. SmartBASE PaaS will be expanded to provide services to other U.S. agencies within the Citizens Services portfolio. We are building and operating a multi-tenant and multi-account cloud environment, and we are looking for adaptable security engineer willing to work in fast-paced and complex environment.

The SmartBASE team is seeking a highly motivated security engineer like you who is focused on operational excellence and robust security measures that adhere to latest security requirements for cloud technologies. You understand the big picture of PaaS infrastructure and can simplify solutions to complex problems, all the while ensuring that our Tenants continue to have the best experience possible. As a member of the SmartBASE team, you will be expected to dive deep to find and fix the root cause of customer issue, investigate why a metric is trending in the wrong direction, or discuss novel approaches to automating operational processes.

You will be a part of an effective team who is raising the performance bar as we strive to become the Center of Excellence for the AWS Cloud services in the Citizens Services Group. That is why you will find endless knowledge-sharing, mentorship and other career advancing resources while working on the edge of the innovative cloud solutions for our clients.

What You’ll Work On:

• Implement and maintain security measures to protect SmartBASE infrastructure and Tenant accounts.

• Conduct security assessments and audits on SmartBASE environments to identify vulnerabilities and risks.

• Collaborate with other team members to design and deploy security solutions for the PaaS.

• Monitor security systems and respond to security incidents within the SmartBASE environment.

• Contribute to the development of security policies and standard operating procedures for the SmartBASE PaaS.

• Provide support and guidance to SmartBASE Team members and Tenants’ personnel on security best practices.

• Review security logs and alerts to identify potential threats within the SmartBASE environments.

• Take lead during security incidents and develop response strategies in collaboration with the engineering team.

• Conduct security assessments on new AWS services and applications.

• Stay current with emerging security threats and technologies to enhance the lab's security posture.

• Ensure SmartBASE’s compliance with IRS Pub 4812 or NIST 800v53.

• Assist the SmartBASE team with developing and enforcing cloud security best practices, including access controls, encryption, and vulnerability management.

Join us. The world can't wait.

You Have:

• 3+ years of experience with AWS across a broad range of services

• Experience with technical writing, including writing security documents such as System Security Plans or Incidence Response Plans

• Experience with security services, such as Security Hub, Nessus, or SIEM solutions

• Experience with coding, including Python or IaC such as CloudFormation, AWS, CDK, or SDK

• Experience with Git tool

• Knowledge of IP networking and operating systems such as Linux and Windows

• Knowledge of NIST standards compliance such as NIST 800-53 r.5

• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements

• Bachelor’s degree

• AWS Security Specialty Certification

Nice If You Have:

• Experience with Agile or Scrum Framework and practices

• Knowledge of Confluence, Jira, or MS Office suite

• Knowledge of building Splunk or Datadog dashboards

• Public Trust

• Possession of excellent communication skills