Cloud Security Architect - Government Contract experience required!

Cloud Security Architect - Government ContractREMOTE, expected to change to Hybrid, DC area candidates only!Responsibilities

Design, develop, and implement secure and

compliant cloud architectures

on AWS, adhering to

FISMA

and

FedRAMP

security controlsConduct threat modeling and security assessments of cloud deployments to identify and mitigate vulnerabilitiesSelect and configure appropriate AWS security services like IAM, KMS, Security Groups, WAF, and CloudTrail to meet compliance requirementsImplement data encryption strategies at rest and in transit, ensuring data protection aligns with

FISMA

and

FedRAMP

guidelinesIntegrate enterprise

security solutions

(e.g.

Splunk, Tenable,

etc) for cloud security monitoring and incident responseAutomate security configurations

and enforce security best practices through infrastructure as code (IaC) tools, ensuring compliance automationDevelop and implement incident response plans for cloud security threats, aligned with

FISMA

and

FedRAMP

incident reporting proceduresStay up to date on the latest AWS security features, vulnerabilities, and compliance updates for

FISMA

and

FedRAMPProvide security guidance and expertise to developers, operations teams, and other stakeholders, fostering a culture of security awarenessDevelops security requirements for

applications migrating from on-prem implementations to the cloudQualifications

Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience)8+ years of experience in information security,

with a minimum of 3 years focused on cloud securityProven experience designing and implementing secure cloud architectures on AWS, with a strong understanding of

FISMA

and

FedRAMP

compliance frameworksIn-depth knowledge of

AWS security best practices,

compliance frameworks (e.g.,

PCI-DSS, HIPAA),

and the ability to map them to

FISMA

and

FedRAMP

controlsExperience with cloud security tools like

IAM roles, KMS encryption, Security Groups, WAF, CloudTrail, and ConfigExperience with security automation tools, infrastructure as code (IaC) methodologies, and compliance automationExcellent communication, collaboration, and problem-solving skills"Bonus Requirements"

AWS Certified Security - Specialty certificationExperience with cloud security posture management (CSPM) toolsExperience with security incident and event management (SIEM) solutionsExperience with cloud workload protection platforms (CWPP)Experience with container security (Docker & Kubernetes)

Laurie RothPresident/Sr. ConsultantDSN-IT561-923-9505lr@dsn-it.com

www.dsn-it.com

https://www.linkedin.com/in/laurie-jane-roth-084769/