Senior Cloud Engineer

About

Since 2005, Crystal Management provides information technology (IT) infrastructure, systems integration, cybersecurity, facility design and transition, and professional services to customers in the defense, civilian federal agencies, homeland security, intelligence, and commercial sectors. We understand the mission demands innovative approaches, technology, and people. With talented professionals deployed worldwide, Crystal Management delivers IT enterprise solutions, systems engineering, and management consulting services for the largest transformation and restationing programs in defense history. Crystal Management is a service-disabled veteran-owned small business.

Position Summary

Crystal Management is seeking a motivated, career, and customer-oriented Senior Cloud Engineer to join our team in the Reston, VA area to provide unparalleled support to multiple federal agencies through the Continuous Diagnostics & Mitigation (CDM) Program. The CDM Program is a high-profile, high-visibility, cybersecurity modernization and risk management program where you can contribute innovative solutions and consult with multiple federal agencies to enhance their Information Assurance (IA) programs and continuous monitoring capabilities.

The Senior Cloud Engineer provides the necessary technical expertise to implement cyber security solutions deployed into cloud-based and hybrid environments for Federal Government clients. This position requires thorough knowledge of cloud architectures, design approaches, tools, and techniques employed to reduce the client's cyber security risk posture. The Senior Cloud Engineer will bring a consultative approach to solving our clients' cybersecurity problems, coupled with demonstrated experience implementing enterprise cybersecurity solutions utilizing cloud-based tools for Federal government clients.

Responsibilities

• Provide subject matter expertise in the areas of cloud, network, and security architectures and technologies
• Provide technical oversight in the development of enterprise security architecture solutions
• Lead technical engagement to assess clients' business and technical objectives, determine deliverables, evaluate risks, and recommend implementation approaches
• Perform requirements mapping and analysis to ensure cloud solutions meet functionality and data requirements set forth in the scope of work
• Lead the development and implementation of architectural designs of enterprise COTS IT security solutions into geographically dispersed cloud and "on-prem" data centers
  • Align standards, frameworks, and security with overall business and technology strategy
  • Create solutions that balance business requirements with information and cyber security requirements
  • Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
  • Ensure tools deployed throughout a hybrid/multi-cloud enterprise can report required data fields programmatically to data aggregation and enrichment systems
  • Ensure ManTech and DHS CDM policies and procedures are followed via audits and other inspection mechanisms
  • Lead and/or support the development of solution product costs for procurement
• Work internally to develop strategic plans for architecture, engineering, integration, and dashboard
• Report and provide feedback to senior management as required
• Document, manage, and report on project risks and opportunities
• Assist in rectifying issues and improving service in faltering/failing projects
• Identify and communicate current and emerging security threats
• Other duties as assigned

Education/Certification Requirements

• Must hold a cloud certification: Azure/AWS Associate level in Admin/Security/Architecture

Qualifications Required

• Minimum 3 years of enterprise IT Engineering experience
• Minimum 1 year of hands-on enterprise IT engineering experience
• Experience implementing technical solutions using COTS security tools in complex cloud-based, on-premises, and hybrid environments. Demonstrated experience:
  • Engineering, integrating, configuring, and deploying COTS solutions
  • Understanding of a three-tiered web application architecture, how/why tiers are separated, and how data flows between them
  • Understanding of different storage offerings from cloud providers and the use case of each
  • Demonstrated understanding of cloud security services such as Log Analytics, Azure Monitor, Azure Sentinel, AWS Guard Duty, AWS CloudTrail, and other such solutions
  • Understanding of SaaS and PaaS cloud-native services and how they can be leveraged to provide efficient serverless solutions and integrations between systems
  • Understanding of 2 or more of these IT/Security functions; asset management, vulnerability management, identity and access management, network security, and data protection.
  • Understanding of Cloud Access Security Brokers, Cloud Security Posture Management, and Cloud Asset Management technologies.
  • Understanding of Zero Trust Architecture and solutions
  • Understanding of how to interact with REST API endpoints (methods, authentication, etc.)
  • Understanding of cloud networking concepts such as subnets, security groups, ACLs, Firewalls, routing, and the differences between cloud platforms on these constructs
• Experience with Infrastructure as Code (IaC) tools such as CloudFormation, TerraForm, Azure ARM templates
• Demonstrated experience in security solution design using existing as well as emerging technologies to deliver enterprise solutions
• Must be able to articulate emerging cybersecurity, Cloud, or other IT technology trends
• Strong understanding of industry best practices related to the implementation of cybersecurity tools, information security policy, NIST, and FISMA controls
• Experience understanding organizational needs, proposing solutions, and managing project execution efforts designed to deliver overall program benefits for Government Agencies
• Experience in conducting assessments of an Enterprise by reviewing technical documentation, conducting interviews and workshops to identify gaps and develop tailored solutions
• Demonstrated ability to present to senior leadership and client audiences
• Microsoft Applications (Word, PowerPoint, Excel)
• JIRA experience
• Scripting experience (Python, PowerShell, BASH)

Clearance Requirements

• Must be a US citizen and pass a background investigation
• Able to obtain and maintain a DHS Suitability/Entry on Duty (EOD)

Physical Requirements

• Office work, typically sedentary with some movement around the office

COVID-19 Safety Protocols: To protect the health and safety of its employees and to comply with customer requirements, employees in certain positions may be required to be fully vaccinated against COVID-19 or subject to facility entry safety protocols (e.g., testing, masking, physical distancing), subject to the status of the federal contractor mandate and customer site requirements.

Crystal Management, LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

#NowHiring

#CoronaVirusHiring