Cloud Security Professional

Overview

Steampunk is searching for someone join our team as a DHS FedRAMP JAB Cloud Security Professional to support our client with the evaluation of multiple cloud services, as well as providing executive advisory services on the recommended use of cloud services. The Cloud Security Specialist will be responsible for the participating in the analysis and evaluation of cloud services design, engineering practices, and architecture, and be a technical representative for the cloud security support team.

Contributions

• Participates on a team for providing expert analysis of cloud cybersecurity architecture, compliance with Federal regulation and policy, and commercial best practices relating to cloud security.
• Assist the Government in formalizing knowledge sharing within the cloud team.
• Review, analyze, discuss, and evaluate the implementation of security controls in multiple information system environments, including dynamic cloud services (IaaS, PaaS, and SaaS) or traditional and static Enterprise Resource Planning computing environment.
• Evaluate the performance of ongoing security maintenance, for example, continuous monitoring (ConMon) or continuous diagnostics and mitigation (CDM). Assess the ability of the service provider to maintain an acceptable security posture/ risk threshold on a monthly basis.
• Analyze risk and vulnerability assessments of planned and installed information systems to identify vulnerabilities, risks, and cyber protection (security architecture) requirements as they relate to the ongoing security risk posture of the system.
• Collaborate with the FedRAMP Review Team and Joint Authorization Board (JAB) Technical Representatives (TR) to build expert consensus regarding areas requiring process improvement and recommended solutions for identified areas requiring improvement.
• Develop information for decision briefs for senior leadership to use in making decisions on recommended solutions and areas requiring process improvement within the FedRAMP Program, process, and execution.
• Accountable for effectual partnerships with: Peer engineering teams to guarantee design, implementation and orchestration of complex, multi-product solutions for the cloud system.
• Provide leadership for the cloud architecture strategy and resolution of architectural issues.
• Establish strong relationships with key business and technology stakeholders and create convergence by demonstrating credibility, empathy and expertise on business and technical issues

Qualifications

• Associates Degree or Higher, or 5 years of experience, preferably in performing one of the following: risk assessments of cloud-based systems, designing and/or implementing network, security, virtualization or cloud system solutions.
• One of the following technical certifications: 

Certifying

Entity

Certification

Certification

Abbreviation

Cisco

Cisco Certified Network Professional Security

CCNP Security

ASIS

Professional Certified Investigator

PCI

EC-Council

Computer Hacking Forensic Investigator

CHFI

FITSI

Federal IT Security Professional - Designer

FITSP-D

GIAC

Reverse Engineering Malware

GREM

GIAC

Secure Software Programmer

GSSP

GIAC

Certified Incident Handler

GCIH

GIAC

Penetration Tester

GPEN

GIAC

Critical Controls Certification

GCCC

GIAC

Exploit Researcher and Advanced Penetration Tester

GXPN

GIAC

Certified Forensic Analyst

GCFA

INCOSE

Expert Systems Engineering Professional

ESEP

GIAC

Continuous Monitoring Certification

GMON

GIAC

Certified Detection Analyst

GCDA

GIAC

Information Security Professional

GISP

GIAC

Network Forensic Analyst

GNFA

ISACA

Certified Information Systems Auditor

ISACA

ISACA

Certified Information Security Manager

CISM

ISACA

Certified in Risk and Information Systems Control

CRISC

ISC2

Certified Secure Software Lifecycle Professional

CSSLP

ISC2

Certified Cloud Security Professional

CCSP

ISC2

Certified Authorization Professional

CAP

ISC2

Certified Information Systems Security Professional

CISSP

ISC2

Information Systems Security Engineering Professional

ISSEP

ISC2

Certified Cyber Forensics Professional

CCFP

JNCIS-SEC

Juniper Networks Certified Internet Specialist Security

JNCIS-SEC

Microsoft

Microsoft Certified Solutions Expert

MCSE

VMWare

VMWare Certified Design Expert

VCDX

AWS

AWS Certified Solutions Architect – Associate

AWS-CSAA

AWS

AWS Certified SysOps Administrator – Associate

AWS

AWS Certified Security - Specialty

MS Azure

Microsoft Certified Solutions Associate

MCSA

MS Azure

MCSD: Azure Solutions Architect

MCSD

Google

Professional Cloud Architect

• Must have knowledge of cloud solution principals and technologies.
• Extensive hands-on experience in cloud technologies, service oriented platforms, and hybrid solutions across locations.
• Experience with hybrid solutions mixing use of private data center and public cloud.
• Prefer hands on experience with major cloud providers such as Azure and/or AWS Cloud Offerings.
• Strong communication and technical writing skills necessary to prepare and conduct instruction, provide technical briefings and prepare technical reports and collaborate other with other team members.

About steampunk

Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors.  Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges.  As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers – and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.