Cloud Security Engineer - (Ts/Sci With Polygraph)

SAIC's National Intelligence Community (NIC) business unit provides Information Technology, Engineering, and Mission solutions and services supporting digital modernization programs in areas such as cloud, cyber, data, AI/ML, and software.

We seek Cloud Security Engineers to provide System Engineering and Technical Assistance (SETA) services in conducting acquisition and technical support activities in Fort Meade, Md. Those supporting this new program will create and/or adopt innovative IT solutions and development through the use of both government and industry tools/software. Aggressively work to reduce/eliminate legacy systems by transitioning their key capabilities to modernized tools and technical debt from services. Embrace a future where capabilities and solutions are deployed across a variety of networks and environments, at varying levels of classifications. Staffing for this program will begin in January 2024.

The Cloud Security Engineer supports PAC hybrid computing efforts by providing recommendations and advice regarding the information assurance and cybersecurity aspects of the agency's cloud-based hybrid computing environment. Tasks include understanding the customer's cloud computing objectives and the implementing contractor's plans and approach, and providing recommendations to support the customer's adoption of, migration to or governance/management of Cloud computing, Cloud DevOps, and other Cloud oriented activities. The successful candidate has:

• Understanding of and experience with commercially available cloud computing services such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS)m and Software as a Service (SaaS) and emerging cloud services.

• Understanding of and experience with commercially available cloud computing services such as Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) and emerging cloud services.

• Understanding of DoD Zero Trust Architecture and ability to provide recommendations and best practices on implementing Zero Trust in a cloud environment.

• Understanding of NIST/FedRAMP security controls and design, architecture, implementation, migration, testing, and assessing of AWS, Azure, or similar in applying Federal requirements to implement cloud solutions.

• Understanding of industry standards, guidelines, and regulatory and compliance requirements related to information security and cloud computing, such as ISO 27001, CSA, NIST 800-53, PCI DSS, or SOC2.

Responsibilities:

• Provide recommendations and documentation for cloud strategy development, adoption of commercial cloud best practices, solutions architecture, and application and data migration.

• Understanding of NIST/FedRAMP security controls and design, architecture,

implementation, migration, testing, and assessing of AWS, Azure, or similar in applying Federal

requirements to implement cloud solutions.

• Understanding of industry standards, guidelines, and regulatory and compliance requirements

related to information security and cloud computing, such as ISO 27001, CSA, NIST 800-53, PCI

DSS, or SOC2.

• Conduct technical security briefings and assist product teams as required.

• Facilitate Information Technology (IT) System Security Certification and Authorization (C & A) activities to achieve an acceptable level of IT operational risk

• Produce formal and informal reports, briefings, and direct input to the PAC Architect

regarding security and functionality requirements, system architecture, and security designs

• Active TS/SCI clearance with polygraph clearance

• Bachelor's degree in a related discipline from an accredited college or university plus ten (10) years of IT experience of which five (5) years must be in the Cloud environment.

• Additional years of experience can be applied in lieu of degree

• Higher degrees can be applied in lieu of experience