General Dynamics Information Technology
Cloud Cyber Security Architect
General Dynamics Information Technology, Baltimore, Maryland, United States,
General Dynamics Information Technology
Delivering consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community.
Type of Requisition:
RegularClearance Level Must Currently Possess:
NoneClearance Level Must Be Able to Obtain:
NoneSuitability:Public Trust/Other Required:
MBI (T2)Job Family:
Cyber SecurityJob Description:Seize your opportunity to make a personal impact as a Cloud Security Architect supporting our HHS HRSA customer. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.As a hands-on Cloud Security Architect, you will architect, engineer, test and implement a TIC 3.0 Cloud environment with a team of engineers and subject matter experts.*Candidates must be able to travel to customer location Maryland to obtain badging prior to starting*Responsibilities:Will migrate existing cloud hosted applications to the new cloud environment.Support the migration of public facing applications hosted on Citrix NetScaler to an Akamai Cloud SASE Load Balancing solution with OKTA Single-Sign-On (SSO).Works with other team members and SME across the program to achieve a unified goal.Create and provide Infrastructure as Code (IaC) for quick repeatable deployments.Ensure solution scales appropriately, are resilient, and support security capabilities in accordance to CISA TIC 3.0 guidelines.Strong understanding of DNS, Firewalls (Azure Firewalls and WAF), Content Delivery Network (CDN), routing, global traffic management (for load balancing), intrusion detection and IPv6.Work with a team of DevOps engineers and SMEs to build, test, validate and demonstrate a complete TIC 3.0 Proof-of-Concept (POC) with Cloud SASE And Azure Cloud Firewall solutions.Mentor and support a team of engineers to provision/configure Azure Cloud Firewall per customer requests in accordance to vendor best practices.Perform and support policy enforcement, at all application levels, in the environment, including but not limited to, SASE provider, Azure Cloud Firewall and within Azure for micro-segmentation.Integrate with SASE Portal authentication with customer IDP, OKTA, providing Multi-Factor Authentication (MFA).Help build a customer chargeback model, with reporting metrics.Help Build reports for post-migration cost estimates based upon current utilization, at the organization and application owner level, in addition to scheduled WAF reports within the SASE solution meeting NIST 800-53 requirements.Work with the team, customers and SMEs to develop required logging requirements (splunk, solarwinds, uptime, etc.).Develop and adhere to Standard Operating Procedures (SOP).Document technical implementation plans and present to customer for approval.Develop, document, and present a comprehensive migration strategy, including timelines, resources, and risk management plans.Perform migration activities from legacy cloud environment to new environment.Work with Program and Project management throughout the period of performance.Perform post migration activities including remediating any issues identified.Furnish/Transfer any software or cloud subscriptions required for the duration of the project.Provide training to the government, and their successors, on details of the migration process, administration, maintenance, support and operational use of the solution.Participates in special projects, as needed.Lead and provide technical support in Change Management processes that directly impact production environment.Resolve technical problems that occur and on-call support for non-business hours.Provide Weekly and on-demand Status Reports on work performed.Required Skills:Bachelor’s degree in a related STEM field and 10+ years of experience in an Architecture position.Certification in at least one or more Azure certifications (Solutions Architect, Security Engineer, Security/compliance/Identity, etc)8+ years of experience working in a large-scale enterprise Azure OrganizationMust be able to obtain a Public Trust and successfully pass a thorough government background screening process (forms/fingerprinting).Ability to travel to Rockville, MD for onboarding and badging process.Desired Skills:Experience with Word, Excel, PowerPoint, Visio, SharePoint, ServiceNow and MS Teams.SCRUM and Kanban Agile MethodologiesExperience with Confluence, Trello, ServiceNow and/or JIRAExperience with any HHS agencies or entitiesDemonstrated strong technical skills and analytic abilities, as well as experience performing system security analysis and risk management.Demonstrated experience performing complex technical tasks with minimal direction.Demonstrated experience in translating an understanding of systems and applications into test plans and perform hands on testing.Demonstrated knowledge of risk management.Possesses experience with communicating vulnerability results and risk posture to stakeholders.Possess a broad knowledge of Azure best practices, policies and guidance.Scheduled Weekly Hours:
40Travel Required:
10-25%Telecommuting Options:
RemoteWork Location:
Any Location / Remote
#J-18808-Ljbffr
Delivering consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community.
Type of Requisition:
RegularClearance Level Must Currently Possess:
NoneClearance Level Must Be Able to Obtain:
NoneSuitability:Public Trust/Other Required:
MBI (T2)Job Family:
Cyber SecurityJob Description:Seize your opportunity to make a personal impact as a Cloud Security Architect supporting our HHS HRSA customer. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.As a hands-on Cloud Security Architect, you will architect, engineer, test and implement a TIC 3.0 Cloud environment with a team of engineers and subject matter experts.*Candidates must be able to travel to customer location Maryland to obtain badging prior to starting*Responsibilities:Will migrate existing cloud hosted applications to the new cloud environment.Support the migration of public facing applications hosted on Citrix NetScaler to an Akamai Cloud SASE Load Balancing solution with OKTA Single-Sign-On (SSO).Works with other team members and SME across the program to achieve a unified goal.Create and provide Infrastructure as Code (IaC) for quick repeatable deployments.Ensure solution scales appropriately, are resilient, and support security capabilities in accordance to CISA TIC 3.0 guidelines.Strong understanding of DNS, Firewalls (Azure Firewalls and WAF), Content Delivery Network (CDN), routing, global traffic management (for load balancing), intrusion detection and IPv6.Work with a team of DevOps engineers and SMEs to build, test, validate and demonstrate a complete TIC 3.0 Proof-of-Concept (POC) with Cloud SASE And Azure Cloud Firewall solutions.Mentor and support a team of engineers to provision/configure Azure Cloud Firewall per customer requests in accordance to vendor best practices.Perform and support policy enforcement, at all application levels, in the environment, including but not limited to, SASE provider, Azure Cloud Firewall and within Azure for micro-segmentation.Integrate with SASE Portal authentication with customer IDP, OKTA, providing Multi-Factor Authentication (MFA).Help build a customer chargeback model, with reporting metrics.Help Build reports for post-migration cost estimates based upon current utilization, at the organization and application owner level, in addition to scheduled WAF reports within the SASE solution meeting NIST 800-53 requirements.Work with the team, customers and SMEs to develop required logging requirements (splunk, solarwinds, uptime, etc.).Develop and adhere to Standard Operating Procedures (SOP).Document technical implementation plans and present to customer for approval.Develop, document, and present a comprehensive migration strategy, including timelines, resources, and risk management plans.Perform migration activities from legacy cloud environment to new environment.Work with Program and Project management throughout the period of performance.Perform post migration activities including remediating any issues identified.Furnish/Transfer any software or cloud subscriptions required for the duration of the project.Provide training to the government, and their successors, on details of the migration process, administration, maintenance, support and operational use of the solution.Participates in special projects, as needed.Lead and provide technical support in Change Management processes that directly impact production environment.Resolve technical problems that occur and on-call support for non-business hours.Provide Weekly and on-demand Status Reports on work performed.Required Skills:Bachelor’s degree in a related STEM field and 10+ years of experience in an Architecture position.Certification in at least one or more Azure certifications (Solutions Architect, Security Engineer, Security/compliance/Identity, etc)8+ years of experience working in a large-scale enterprise Azure OrganizationMust be able to obtain a Public Trust and successfully pass a thorough government background screening process (forms/fingerprinting).Ability to travel to Rockville, MD for onboarding and badging process.Desired Skills:Experience with Word, Excel, PowerPoint, Visio, SharePoint, ServiceNow and MS Teams.SCRUM and Kanban Agile MethodologiesExperience with Confluence, Trello, ServiceNow and/or JIRAExperience with any HHS agencies or entitiesDemonstrated strong technical skills and analytic abilities, as well as experience performing system security analysis and risk management.Demonstrated experience performing complex technical tasks with minimal direction.Demonstrated experience in translating an understanding of systems and applications into test plans and perform hands on testing.Demonstrated knowledge of risk management.Possesses experience with communicating vulnerability results and risk posture to stakeholders.Possess a broad knowledge of Azure best practices, policies and guidance.Scheduled Weekly Hours:
40Travel Required:
10-25%Telecommuting Options:
RemoteWork Location:
Any Location / Remote
#J-18808-Ljbffr