Senior Cloud Security Engineer

Location: Laurel, MD
ApplyLogic is a fast-growing Veteran-Owned consulting firm, headquartered in Dunn Loring, VA. Our people are our greatest asset and our company culture is grounded on that belief. We offer challenging and interesting work in a friendly and supportive environment. We deliver best-in-class technical expertise to the Federal Government market through IT professional service contracts. 

We offer a competitive salary with a robust Fortune 500 type benefits package: employee assistance, employee adoption, 401K with match, medical, dental, vision, life, short-term and long-term disability, 15 paid time days off, 10 holidays, unlimited web-based training and up to $5K towards continuing education and/or professional development and more!
 
Founded in 2004, ApplyLogic is a Veteran Owned Small Business, ISO9001:2008 certified with over $7M annual revenues and 35 employees. Our growth has been recognized in the Washington Technology Fast 50 and the INC. 5000. We have an immediate Senior Cloud Security Engineer  position available in Laurel, MD.

Job Description and Responsibilities:

The Senior Cloud Security Engineer will work with the Infrastructure and Engineering Staff to incorporate tools and best practices that ensure control requirements are addressed to promote a robust security posture for the communications aspects of applications in both a private on premises data centers and public cloud offerings.
 
  • Design, implement and monitor security measures for the protection of web sites, cloud networks and information privacy
  • Identify, define & implement system security requirements for cloud applications
  • Work with the Infrastructure and Engineering Staff to incorporate tools and best practices that ensure control requirements are addressed to promote a robust security posture in both private on premises and public cloud offerings.
  • Design, architect, install, configure, harden, and remediate scanning issues for Cloud environment as well as support the development of strategies to respond to and recover from a security incident
  • Provides expertise with Federal Requirements related to special classifications of data especially Title 13 and 26, FISMA, FedRAMP. NIST, etc
 
Required Experience:
 
  • Amazon Web Services (AWS) platform capabilities and best practices architectures,and engineering solutions within multiple Cloud Service Experience working in AWS via the CLI and management console.  
  • Knowledge and experience architecting and configuring Virtual Private Clouds (VPCs)
  • Experience with Windows servers: Design, Configuration, and Administration of Windows 2008r2 and 2012. Knowledge of Active Directory, including Group Policies.
  • Must have solid hands-on experience with Active Directory, including Group Policies.
  • Strong knowledge of VMWare and Amazon Machine Images (AMI)
  • Security frameworks including , NIST SP 800-53, , , FISMA, FedRamp, HITRUST, or NIST CSF
  • Experience with SIEM, DLP, IDS, Forensics, Detection, Boundary Defense tools
  • High level scripting skills: Bash/Python/Ruby Expert knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
  • Acquisition, design, deployment, installation, maintenance, and usage of the Government Enterprise networks.
  • Operations for firewalls, routers and switches and the ability to formulate access control lists (ACLs) via the Command Line Interface (CLI).
  • Enterprise level security hardening for Windows, Linux, and SQL, Oracle, and RDS database solutions in accordance with Center for Internet Security (CIS) and Security Technical Implementation Technical Guides (STIGs)
  • Continuity of operations (COOP) concepts and implementation for network related hardware failures including isolated and major outages. 
  • Development and implementation of vulnerability remediation strategies. Configuration and execution of vulnerability and web application scans. Customization compliance scans to meet agency established baselines.
  • Experience with automating server configuration for security including logging, key changes, and system hardening.
  • Familiarity with performing threat modelling, risk analysis, root cause analysis, risk identification, and risk mitigation 
 

Education and Certifications
  • Bachelor’s Degree and 14 years of experience
  • CISSP, CCNP, AWS SA, MCSE preferred
 
Clearance:
  • U.S. Citizenship
  • Public Trust, or must be able to obtain a Public Trust clearance
this job portal is powered by CATS
ApplyLogic is an equal opportunity employer. The Equal Employment Opportunity Policy of ApplyLogic is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. ApplyLogic hires and promotes individuals solely on the basis of their qualifications for the job to be filled. ApplyLogic believes that associates should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status or disability.