ENS Solutions
Posted 2d ago

Cloud Security Engineer - Active TS/SCI with CI Poly

ENS Solutions
Reston, Virginia, United States
OnsiteFull Time
Responsibilities
  • evaluating compliance
  • implementing architectures
  • advising leaders
Requirements
  • Requires 5+ years building and administering cloud environments
  • Infrastructure code
  • Security documentation
  • Architecture evaluations, RMF, and Agile experience
  • Plus an active TS/SCI with CI Poly and required DoD certifications
Technical tools mentioned
TerraformCloudFormationBicepRisk Management Framework (RMF)AgileSoftware Development Life Cycle (SDLC)COTsGOTS

Job description

As a hands-on security engineer on our team, you’ll evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization’s Information Assurance (IA) and security requirements. You'll assist in defining organizations’ desired state and risk thresholds and analyze actual state information to assess compliance. You'll work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives. You'll assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You’ll recommend tools and capabilities based on your research of the current environment and knowledge of various on-premise, cloud-based, and hybrid resources to address security requirements. You will implement the cloud security architectures, tools, and processes that you helped to shape and define.  Your technical experience will be vital as you work with IC clients to ensure standards are met with security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment while collaborating with tomorrow’s cloud security experts. 

Requirements

  • 5+ years of hands-on experience building and administering cloud environments, utilizing cloud-native functionality as well as COTs, GOTS, and open source tools to meet your objectives.
  • Knowledge of Infrastructure code concepts such as Terraform, CloudFormation, or Bicep
  • Experience with developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans
  • Experience with security architecture evaluations, guidance development, and troubleshooting
  • Experience with the Risk Management Framework (RMF)
  • Experience with working in an Agile development environment
  • HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities.
  • Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND certification within 30 days of offer accept
  • Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 45 days of CSSP-IS date (or offer accept if candidate already has CSSP-IS Cert).

 

Nice If You Have:  

  • Experience with the software development life cycle (SDLC)
  • Possession of excellent team leadership, development, and client relationship skills
  • Possession of excellent interpersonal skills
  • Possession of excellent verbal and written communication skills

Benefits

Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients.

Why ENS?

  • Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS
  • 401k Contribution from Day 1
  • PTO + 11 Paid Federal Holidays
  • Long & Short Term Disability Insurance
  • Group Term Life Insurance
  • Tuition, Certification & Professional Development Assistance
  • Workers’ Compensation
  • Relocation Assistance

Candidate AI Usage Policy

AI tools are an important part of daily work at ENS Solutions, and we are committed to their responsible and ethical use. To ensure a fair and equitable candidate evaluation based on individual skills, knowledge, and experience, candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.

About ENS Solutions

IT consulting and management firm for federal government clients.

Similar jobs

Cloud Security Engineer roles near Reston, Virginia
17h
Save
Mark Applied
Hide
Cloud Security Engineer in Washington, District Of Columbia, United States
Washington, District of Columbia, United States
RemoteFull Time
LS Technologies
LS Technologies: Federal consulting and engineering firm serving government agencies with aviation, air-traffic, cybersecurity, and technology services.
10+ YOERequires 10+ years of systems engineering experience, including 5+ years in cloud security architecture, cloud platform expertise, federal cybersecurity knowledge, and a bachelor's degree or equivalent experience.
NIST, FedRAMP, DHS CDM, AWS, Azure, GCP, Docker, Kubernetes, OpenShift, Tenable, Qualys, Splunk, ELK, CI/CD, IAM, PKI
1d
Save
Mark Applied
Hide
Cloud Security Engineer
Chantilly, Virginia, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Global firm providing management, technology, and engineering consulting services.
Experience with security documentation, architecture evaluations, RMF, Agile development, and JIRA. Requires TS/SCI clearance with polygraph, HS diploma/GED, and ability to obtain a listed security certification within 6 months.
Risk Management Framework (RMF), JIRA, Security+ CE, SSCP, CCNA-Security, GSEC, Software Development Life Cycle (SDLC)
1d
Save
Mark Applied
Hide
Senior Cloud Security Engineer
Bellevue or Menlo Park or New York City or Washington or Denver or Westlake or Chicago or Lake Mary or Clearwater or Gainesville
$146k-$220k/yr HybridFull Time
Robinhood
RobinhoodNASDAQ: HOOD: Provides brokerage, crypto, advisory, and banking services.
Expert AWS cloud security experience, Golang or Python proficiency, Terraform Infrastructure-as-Code, and knowledge of AWS security services, AWS Well-Architected, and CIS Benchmarks.
Amazon Web Services (AWS), Golang, Python, Terraform, AWS Well-Architected Framework, CIS Benchmarks, Identity and Access Management (IAM), Service Control Policies (SCPs), AWS WAF, AWS Network Firewall
1d
Save
Mark Applied
Hide
Cloud Security Engineer (Job 1445)
Bethesda, Maryland, United States
$150k-$158k/yr OnsiteFull Time
DLH Corporation
DLH CorporationNasdaq Capital Market: DLHC: Public U.S. government contractor providing health, cybersecurity, research, and engineering solutions to federal agencies.
12+ YOEBachelor’s degree or equivalent, 12+ years in IT, and 4+ years in systems engineering. Requires cloud security, Azure/AWS, vulnerability remediation, security tools, technical communication, and ability to obtain Public Trust clearance.
Azure, AWS, Security Information and Event Management (SIEM), Active Directory Group Policy, SQL, Kubernetes, Docker, Intune, Ivanti, PDQ, Jamf, Cisco ISE, Infoblox, SaaS, PaaS, SNow, RBAC, EntraID
3d
Save
Mark Applied
Hide
Cloud Security Engineer
Washington, District of Columbia, United States
$104k-$218k/yr HybridFull Time
CACI
CACINYSE: CACI: Provider of specialized IT and mission-critical government services.
7+ YOE7+ years of relevant experience, BA/BS or equivalent, active Top Secret with SCI eligibility, IAT II certification, Windows and Linux administration, PowerShell, HCI, networking, Ansible, Terraform, and Git expertise.
Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), VMDK, OVF, OVA, QEMU, AMIs, Azure Virtual Machine Images, OVS, AWS, Azure, VMWare, Nutanix, Virtual Box, CISCO, Arista, Encase, Axiom, Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), Endpoint Detection and Response (EDR), PowerShell, REST API, Ansible, Terraform, Security Technical Implementation Guides (STIGs), Windows Server, Active Directory, DNS, DHCP, RDS, GPO, Linux, RBAC, Veeam, Commvault, TCP/IP, VLANs, LACP, Git, RMF, ATO
3d
Save
Mark Applied
Hide
Cloud Security Engineer
Washington, District of Columbia, United States
$104k-$218k/yr HybridFull Time
CACI
CACINYSE: CACI: Provider of specialized IT and mission-critical government services.
7+ YOERequires active Top Secret with SCI eligibility, 7+ years of relevant experience, BA/BS or equivalent, IAT II certification, Windows and Linux administration, PowerShell, networking, HCI, backup, and Infrastructure as Code expertise.
Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Firewalls, VMDK, OVF, OVA, QEMU, Amazon Machine Images (AMIs), Azure Virtual Machine Images, Open vSwitch (OVS), AWS, Azure, VMware, Nutanix, VirtualBox, Cisco, Arista, EnCase, Axiom, Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), Endpoint Detection and Response (EDR), PowerShell, REST API, Ansible, Terraform, Security Technical Implementation Guides (STIGs), Windows Server, Active Directory, DNS, DHCP, Remote Desktop Services (RDS), Group Policy Objects (GPO), Linux, Veeam, Commvault, TCP/IP, VLAN, routing, Link Aggregation Control Protocol (LACP), Git
1w
Save
Mark Applied
Hide
Cloud Security Engineer
Washington, District of Columbia, United States
$135k-$175k/yr OnsiteFull Time
Koniag Technology Solutions
Koniag Technology Solutions: Alaska Native-owned IT consulting firm serving federal defense and civilian agencies with enterprise technology and program-management services.
5+ YOEBachelor's degree in an IT or security field, 5+ years of relevant experience, Secret clearance, cloud security experience across two or more major platforms, and knowledge of FISMA, FedRAMP, and NIST SP 800-53.
Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), AWS Config, Azure Security Center, GCP Security Command Center, Qualys, Tripwire, Splunk, ServiceNow, SAML, OAuth2, Terraform, CloudFormation, ARM templates, FISMA, FedRAMP, NIST SP 800-53, IAM, SSO, Infrastructure as Code (IaC)
1w
Save
Mark Applied
Hide
Cloud Security Engineer
Arlington, Virginia, United States
$140k-$170k/yr HybridFull Time
ECS Federal
ECS FederalEFOR: Federal segment of Everforth delivering technology and engineering solutions.
Bachelor’s degree, 7 years of IT experience including 3 years in cloud security or vulnerability management, required security certification, scripting skills, compliance knowledge, and US citizenship.
AWS, Azure, GCP, Python, Bash, PowerShell, Terraform, CSPM, CVE, CWE, CVSS, SOC 2, CIS, NIST, ISO 27001, DISA STIG, RMF, IAM, AI, GPT