SAIC
AWS Cyber Cloud Computing Engineer
SAIC, Montgomery, Alabama, United States, 36136
Description
SAIC is hiring an
AWS Cyber Cloud Computing Engineer
for the Cloud One program under the Air Force Lifecycle Management Center Office for Network Integration (AFLCMC/HNI). The Cloud One Common Computing Environment is an existing global, interconnected, virtualized, hybrid, and IT infrastructure hosting mission systems, applications, services, and data that will serve the U.S. Air Force (USAF) and U.S. Army (USA). Cloud One incorporates the capabilities of commercial cloud and Managed Service Providers (MSP) residing in Cloud Service Providers (CSPs). Cloud One facilitates the USAF and USA's efforts to migrate applications to a cloud environment, allowing the closure of data centers to support the Data Center Optimization Initiative (DCOI) and allowing for increased efficiencies across the entire spectrum of the USAF and USA's IT operations.
The candidate for this position will work primarily with impact level 6 (IL6) information and should be in the local vicinity of Hanscom Air Force Base, Massachusetts, Charleston SC, or Gunter Air Force Base in Montgomery, Alabama.Other locations with access to an IL6 facility may be acceptable.
Job Responsibilities:Architect, plan, configure, deploy, maintain, and upgrade COTS/GOTS and custom toolsets to address vulnerabilities and/or implement security controlsApply a combination of expert engineering knowledge of enterprise IT and security solutions to design, develop and/or implement solutions to ensure they are consistent with enterprise architecture security policies and support full spectrum military cyberspace operationsDesign, test, and implement secure operating systems, networks, security monitoring, tuning and management of IT security systems and applications, incident response, digital forensics, loss prevention, and eDiscovery actions.This includes security control design and solution planning at the system, mission, and enterprise level, security-in-depth/defense-in-depth, and other related IAM/ISSO/ISSE support functionsHandle security issues including architectures, firewalls, electronic data traffic, and network accessResearch and evaluate cyber capabilities and new security tools and products against operational requirements and introduce them to the enterprise in alignment with IT security strategyTransform customer environments into a more secure operating environment in a holistic mannerDevelop technical solutions to complex problems which require the regular use of ingenuity and creativityGuide the successful completion of major programsWork directly with the AWS IL6 Operations & Support team to maximize the security posture of Cloud OneSpecific duties include:
Perform scans using ACAS or similar toolsRemediate finding by leveraging and enhancing Cloud One Infrastructure as Code (IAC)Interface with cybersecurity stakeholders during integrated product team meetings, working groups, and all other related discussionsSupport security assessments and the resolution of concerns/issues identified by assessment team(s) including security reviews, test, and exercisesProvide automated application of DoD-hardened STIG for platforms and application configurationsImplement and provide a method of verification of the applicable DISA STIG, SRGs, and best practicesAbility to configure and implement AWS cloud-native security tools and servicesAbility to provide and implement timely remediation for audit findingsAbility to support POA&M reviews and recommendationsAbility to support Code Review Security Vulnerabilities RemediationAbility to support the updates to Risk Management Framework Artifacts
Qualifications
Required Education and Experience:Bachelors and five (5) or more years experience; Masters and three (3) or more years experienceAdditional years of experience may be substituted in lieu of degreeRequired Clearance and Certifications:Secret ClearanceUS citizenshipSecurity + certificationRequired Qualifications:Knowledge of DoD Policies and procedures including DoD 8500.01 and DoD 8510.01Compliant with DoD and USAF training requirements in DoDD 8140 and AFMAN 17-1303Experience with Risk Management Framework (RMF) and updating of security artifactsExperience with compliance verification methods including DISA STIG, SRGs, and best practicesExperience with DevSecOpsKnowledge of the DoD suite of security tools including ACAS, STIG Viewer, Endpoint Security, etc.Knowledge of cloud environments provided by AWSWorking knowledge of Microsoft Office Suite including Microsoft VisioHands on experience deploying security tools in an AWS cloud environmentExperience with AnsibleExperience with LinuxDesired Qualifications:Knowledge of DESMF(ISC)2 CISSP, CompTIA CASP, or other cybersecurity certification preferredExperience with Agile, Scrum, SAFe or other modern software development methods/practicesExperience supporting USAF or USA software development projects
SAIC accepts applications on an ongoing basis and there is no deadline.
Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.
SAIC is hiring an
AWS Cyber Cloud Computing Engineer
for the Cloud One program under the Air Force Lifecycle Management Center Office for Network Integration (AFLCMC/HNI). The Cloud One Common Computing Environment is an existing global, interconnected, virtualized, hybrid, and IT infrastructure hosting mission systems, applications, services, and data that will serve the U.S. Air Force (USAF) and U.S. Army (USA). Cloud One incorporates the capabilities of commercial cloud and Managed Service Providers (MSP) residing in Cloud Service Providers (CSPs). Cloud One facilitates the USAF and USA's efforts to migrate applications to a cloud environment, allowing the closure of data centers to support the Data Center Optimization Initiative (DCOI) and allowing for increased efficiencies across the entire spectrum of the USAF and USA's IT operations.
The candidate for this position will work primarily with impact level 6 (IL6) information and should be in the local vicinity of Hanscom Air Force Base, Massachusetts, Charleston SC, or Gunter Air Force Base in Montgomery, Alabama.Other locations with access to an IL6 facility may be acceptable.
Job Responsibilities:Architect, plan, configure, deploy, maintain, and upgrade COTS/GOTS and custom toolsets to address vulnerabilities and/or implement security controlsApply a combination of expert engineering knowledge of enterprise IT and security solutions to design, develop and/or implement solutions to ensure they are consistent with enterprise architecture security policies and support full spectrum military cyberspace operationsDesign, test, and implement secure operating systems, networks, security monitoring, tuning and management of IT security systems and applications, incident response, digital forensics, loss prevention, and eDiscovery actions.This includes security control design and solution planning at the system, mission, and enterprise level, security-in-depth/defense-in-depth, and other related IAM/ISSO/ISSE support functionsHandle security issues including architectures, firewalls, electronic data traffic, and network accessResearch and evaluate cyber capabilities and new security tools and products against operational requirements and introduce them to the enterprise in alignment with IT security strategyTransform customer environments into a more secure operating environment in a holistic mannerDevelop technical solutions to complex problems which require the regular use of ingenuity and creativityGuide the successful completion of major programsWork directly with the AWS IL6 Operations & Support team to maximize the security posture of Cloud OneSpecific duties include:
Perform scans using ACAS or similar toolsRemediate finding by leveraging and enhancing Cloud One Infrastructure as Code (IAC)Interface with cybersecurity stakeholders during integrated product team meetings, working groups, and all other related discussionsSupport security assessments and the resolution of concerns/issues identified by assessment team(s) including security reviews, test, and exercisesProvide automated application of DoD-hardened STIG for platforms and application configurationsImplement and provide a method of verification of the applicable DISA STIG, SRGs, and best practicesAbility to configure and implement AWS cloud-native security tools and servicesAbility to provide and implement timely remediation for audit findingsAbility to support POA&M reviews and recommendationsAbility to support Code Review Security Vulnerabilities RemediationAbility to support the updates to Risk Management Framework Artifacts
Qualifications
Required Education and Experience:Bachelors and five (5) or more years experience; Masters and three (3) or more years experienceAdditional years of experience may be substituted in lieu of degreeRequired Clearance and Certifications:Secret ClearanceUS citizenshipSecurity + certificationRequired Qualifications:Knowledge of DoD Policies and procedures including DoD 8500.01 and DoD 8510.01Compliant with DoD and USAF training requirements in DoDD 8140 and AFMAN 17-1303Experience with Risk Management Framework (RMF) and updating of security artifactsExperience with compliance verification methods including DISA STIG, SRGs, and best practicesExperience with DevSecOpsKnowledge of the DoD suite of security tools including ACAS, STIG Viewer, Endpoint Security, etc.Knowledge of cloud environments provided by AWSWorking knowledge of Microsoft Office Suite including Microsoft VisioHands on experience deploying security tools in an AWS cloud environmentExperience with AnsibleExperience with LinuxDesired Qualifications:Knowledge of DESMF(ISC)2 CISSP, CompTIA CASP, or other cybersecurity certification preferredExperience with Agile, Scrum, SAFe or other modern software development methods/practicesExperience supporting USAF or USA software development projects
SAIC accepts applications on an ongoing basis and there is no deadline.
Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.