Cloud Security Engineer

Job Description

At LS Technologies, a Tetra Tech company, we're on the lookout for a dynamic Cloud Security Engineer to support the Federal Aviation Administration (FAA) in revolutionizing the National Airspace System (NAS) server consolidation and virtualization with an emphasis on Cloud and Hybrid solutions, security orders, and process and procedures.

Responsibilities

• Play a significant role in architecting, developing, deploying, and maintaining server consolidation and virtualization and integrating cloud native and hybrid cloud solutions in support of various FAA Air Traffic Organization workloads.
• Engage closely with stakeholders in support of cloud services and cybersecurity best practices and implementing remediation projects to resolve outstanding POAMs.
• Maintaining system baselines and configuration management items in accordance with orders and policies.
• Applying system engineering techniques to solve and mitigate cyber vulnerabilities.
• Collaborating with team members to troubleshoot and resolve issues related to containerization. environments, application programming interfaces, and infrastructure configurations.
• Collaborating with internal and external stakeholders on activities related to cloud computing.
• Developing new ideas and techniques that advance the state of the practice for cybersecurity through the application of solutions to reduce risk.
• Familiarity with cloud networking concepts like Virtual Private Clouds, subnets, and security groups.
• Providing effective communication with stakeholders at all levels.
• Providing guidance with Conceptual, Logical, and Exchange models.
• Working independently and in a group to resolve technical issues in a dynamic environment.
• Ensuring compliance with relevant cybersecurity regulations, standards, and frameworks, including NIST, FISMA, and CIS.

Education

• Bachelor's degree in Engineering, Math, Computer Science, or related fields.

Qualifications

• 11+ years of relevant experience (formal degree substitution can be applied)
• Demonstrated experience in server consolidation and virtualization.
• Demonstrated knowledge of cloud infrastructure components such as GitLab, OpenShift, and ArgoCD.
• Demonstrated knowledge and understanding of security technologies and their application (e.g., Splunk and Tripwire).
• Understanding and knowledge of Cloud Service Provider's capabilities and process; specific experience with Amazon Web Services (AWS) GovCloud and AWS Commercial
• Demonstrated experience with Docker and Kubernetes for container orchestration.
• Demonstrated experience with Windows and UNIX/Linux security best practices and patching.
• Experience with implementing security controls/hardening in accordance with security policy/guidance (e.g., CIS Benchmarks) for servers and endpoints
• Support the implementation of infrastructure as Code (IaC) using Terraform to automate cloud resource provisioning and management.
• Experience with Continuous Integration/Continuous Deployment (CI/CD); Implementation of CI/CD pipelines for automated testing and development.
• Understanding of infrastructure and cloud security best practices; DevSecOps, Identify and Access Management, encryption, and compliance standards.
• Proficiency in MS Office Suite.

Work Requirements:

• Work location: William J Hughes Technical Center (WJHTC), Egg Harbor Township, NJ (ACY)
• Work Hours: 40 (FTE)
• Travel: 10 - 20%
• Physical requirements:
  • Extended Computer Use: Regular and prolonged periods of working at a computer terminal.
  • Lifting and Carrying: Occasional lifting of equipment and materials weighing up to 50 pounds may be required during installations or maintenance.
  • Mobility: Ability to move around the office environment to access computer hardware, networking equipment, and server rooms.
  • Dexterity: Manual dexterity and visual acuity to operate computer equipment, troubleshoot issues, and perform tasks requiring precision.