Cloud Security Engineer

Join Booz Allen Hamilton as a hands-on Cloud Security Engineer supporting cloud-based security architectures and mission-critical IT systems for the Intelligence Community. This role emphasizes security architecture implementation, evaluation of security documentation, and support for validation and accreditation activities aligned to the Risk Management Framework (RMF).

Location and Work Model

McLean, VA (onsite)

This position is described as onsite, with work primarily performed full-time at a customer facility. Employees working virtually are generally expected to have cameras on during meetings. The employer also notes that there may be occasions requiring in-person work at a Booz Allen or customer facility.

Responsibilities

• Evaluate and support documentation, validation, assessment, and accreditation processes to ensure IT systems meet organizational Information Assurance (IA) and security requirements.
• Assist with defining desired state and risk thresholds, and analyze actual state information to determine compliance.
• Collaborate with leaders to advise on codifying strategic objectives into doctrine and procedures aligned to defined objectives.
• Evaluate computer applications, software, or specialized utility programs to determine whether software assurance best practices are followed.
• Recommend security tools and capabilities based on research of the current environment across on-premise, cloud-based, and hybrid resources.
• Implement the cloud security architectures, tools, and processes that you helped shape and define.

Required Qualifications

• 5+ years building and administering cloud environments, including use of cloud-native functionality and COTs, GOTS, and open-source tools to meet objectives.
• Experience developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans.
• Experience with security architecture evaluations, guidance development, and troubleshooting.
• Experience with the Risk Management Framework (RMF).
• Experience working in an Agile development environment.
• Knowledge of infrastructure code concepts, including Terraform, CloudFormation, or Bicep.
• Active TS/SCI clearance and willingness to take a polygraph exam.
• Education and IT project support experience equivalency: HS diploma or GED with 7+ years; Associate’s degree with 5+ years; Bachelor’s degree with 3+ years; or Master’s degree with 1+ year.
• Ability to obtain a DoD 8570 IAT Level III Certification (examples listed include SecurityX, CASP+, CCNP Security, CISA, CISSP, CISSP Associate, GCED, GCIH, or CCSP) within 30 days of start date.
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS) (examples listed include CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND) within 30 days of start date.

Technologies

• Terraform
• CloudFormation
• Bicep
• Risk Management Framework (RMF)

Benefits

• Health, life, disability, financial, and retirement benefits
• Paid leave
• Professional development
• Tuition assistance
• Work-life programs
• Dependent care
• Paid leave and recognition awards program acknowledging employees for exceptional performance and superior demonstration of company values

Nice If You Have

• Experience with the software development life cycle (SDLC)
• Excellent team leadership, development, and client relationship skills
• Excellent interpersonal skills
• Excellent verbal and written communication skills

Clearance and Security Screening

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance is required.

Compensation and Posting Timeline

• Projected compensation range: $99,000.00 to $225,000.00 (annualized USD)
• This posting will close within 90 days from the posting date.

Identity Verification and Interview Requirements

• Complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud.
• You are expected to be on camera during interviews and assessments.
• The employer reserves the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

Use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.