SITEC - Cloud Security Engineer - MacDill AFB

Peraton requires Cloud Security Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM.  This position is located at MacDill AFB in Florida.  

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. 

A Cloud Security Engineer is needed to assist in the planning, building and management of cybersecurity for a federal customer's Cloud Environment. These responsibilities would require a technical understanding and include addressing the cybersecurity of cloud deployments by ensuring the design, configuration, implementation, data controls, monitoring, logging, networking, and general architecture are all compliant with DoD regulations. The Cloud Security Engineer would help configure and build out tooling to scan and remediate vulnerabilities with production deployments and the Continuous Integration/Continuous Delivery pipelines used by development teams to deploy solutions. This position would be responsible for applying the proper cybersecurity controls and working with the architecture teams to make sure the build out of the cloud environments is properly hardened and secured.

• Supports the design, planning and implementing secure cloud migrations, as well as adopting new cloud technologies to support business and project needs. 
• Researches and adopts new cloud technologies/configurations to support business and project needs and continually improve security posture. 
• Develops, tests, and implements plans for new designs/configurations. 
• Serves as the subject matter expert on the Microsoft Azure. 
• Leads the response to cyber threats, attacks and vulnerabilities and leads and performs risk analysis for vulnerabilities, incidents and change management requests. 
• Leads and performs risk analysis for vulnerabilities, incidents, and change management requests. 
• Analyzes large amounts of often conflicting data and makes sound decisions in extremely stressful situations. 
• Implements enterprise security controls including malware, protection, firewalls, intrusion detection systems, content filtering, internet proxies, encryption controls, and log management solutions. 
• Gathers and understands internal customer requirements to develop reliable, secure solutions. 
• Researches new cloud technologies/configurations to continually improve security posture. 
• Designs, implements, and operates enterprise information security service capabilities and functions in large scale, technically complex organizations. 
• Supports the hybrid multi-cloud by following strict security protocols (including IAM, data encryption, and governance and management policies), developing a migration plan, developing interconnectivity with legacy systems, and integrating monitoring and reporting tools. 
• Works as part of a team and independently with limited supervision. 
• Prioritizes work, meets deadlines, leads, mentors, and trains others.
• Represents USSOCOM and interfaces with software and hardware vendors for support issues

Required Qualifications:

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
• Degree should be from an ABET or NCAE accredited institution in one of the following fields: Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering.
• Active IAT Level II Certification
• DoD TS/SCI clearance 
• Proficiency in cybersecurity principles and technologies (firewalls, IDS, SIEMs).
• Knowledge of the Risk Management Framework (RMF) and Security Technical Implementation Guides (STIGs).
• Knowledge of the Authorization to Operation (ATO) process and Continuous ATO along with needed documentation.
• Experience with cloud platforms (Azure).
• Knowledge of cloud networking, storage, and architecture.
• Experience with cloud observability toolsets.
• Understanding of version control systems (Git).
• Experience configuring continuous integration/continuously delivery (CI/CD) cybersecurity tools.
• Familiarity with Kubernetes environments and container security.
• Basic understanding of Linux administration and programming (Java, Python, C#).
• Understanding of Infrastructure and Configuration as Code tools (Ansible/Terraform).
• Experience with identity and access management (IAM) solutions (Azure Entra ID, AWS IAM, Keycloak).

Desired Qualifications:

• Azure Solutions Architect Expert,
• Azure Administrator Associate,
• One or more of the following:
  • CISSM
  • CISSO
  • CISSP
  • FITSP-D
  • GCIA
  • GCLD
  • GCSA
  • GDSA
  • GICSP