Cloud Security Architect Engineer

9th Way Insignia is a service-disabled veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions. Our specialties include cybersecurity cloud modernization software development data analytics enterprise architecture enterprise IT analytics process automation and artificial intelligence. Learn more about 9th Way Insignia at password: Niner

Team (Project) Introduction

We are recruiting for a range of cybersecurity opportunities supporting federal customers focused on strengthening enterprise security architecture systems engineering and the secure implementation of technologies across the environment.

The work involves applying established cybersecurity standards guidelines and frameworks to help translate organizational and business requirements into secure scalable technical solutions. Team members may contribute to security architecture and engineering efforts implementation guidance technical analysis and the development of repeatable approaches that support the consistent deployment and operation of secure technologies across complex enterprise environments.

Systems security engineering is an important component of this work with an emphasis on incorporating security and stakeholder protection requirements throughout the system development life cycle from concept and design through development production sustainment and decommissioning. The team will apply established systems engineering and cybersecurity principles to help protect systems applications data and supporting technologies.

Ultimately this work supports the broader mission to strengthen its cybersecurity posture reduce organizational risk and protect critical systems and information from evolving cyber threats including external adversaries and insider threats.

9^thWay Insignia is looking for an Engineer 3 Cloud Security Architect / Engineer to join this team.

Professional Level Information:
An Engineer 3 typically plans and directs research or development work on complex projects along with engaging various parties in design and development. Costs and recommendations of new components may also involve part of the job scope. Performs multiple engineering-related tasks in various assignments within the project and firm. An Engineer 3 oversees the design development implementation and analysis of technical products and systems. An Engineer 3 has broad knowledge of engineering procedures and assists in the resolution of complex problems. An Engineer 3 has strong technical skills and background a knack for learning new technologies and a blend of good problem-solving and innovation needed to resolve a wide variety of technical production challenges.

Functional Job (LCAT) Information:
The Cloud Security Architect / Engineer will design assess implement and support secure cloud architectures and engineering solutions for the program. The architect/engineer will ensure cloud systems and applications are designed and implemented in accordance with VA cybersecurity requirements Federal security frameworks Zero Trust principles risk-management requirements and applicable authorization standards.

Responsibilities:

• Design develop assess and implement secure cloud architectures and engineering solutions supporting VA enterprise systems applications platforms and modernization initiatives.
• Translate cybersecurity business technical and regulatory requirements into practical cloud security architectures controls engineering requirements and implementation approaches.
• Integrate applicable FedRAMP and Risk Management Framework (RMF) requirements into cloud systems applications platforms and technical solutions.
• Support Federal Assessment and Authorization (A&A) and Authority to Operate (ATO) activities for cloud-based systems and services.
• Develop cloud security solutions that align with applicable VA security policies Federal cybersecurity frameworks and regulatory requirements.
• Apply Zero Trust defense-in-depth least privilege and secure-by-design principles to cloud architecture and engineering decisions.
• Conduct security architecture reviews of new existing and modernized cloud systems to determine whether proposed designs adequately address threats vulnerabilities and applicable security requirements.
• Perform cloud architecture risk and gap analyses to evaluate compliance with VA and Federal policies standards security frameworks and approved architectural requirements.
• Identify architectural weaknesses security-control gaps configuration risks and compliance deficiencies within cloud environments and recommend technically sound mitigation strategies.
• Conduct or support cloud threat modeling to identify attack vectors threat actors misuse cases attack paths control gaps residual risks and appropriate mitigations.
• Review cloud solution designs applications platforms networks identity services and data architectures for security risks prior to implementation.
• Evaluate technical design artifacts to confirm applicable security requirements have been incorporated into proposed cloud solutions.
• Develop Security Reference Architectures Solution Architectures Security Patterns and other reusable cloud security design guidance.
• Document logical physical conceptual and data-flow architectures for cloud solutions and supporting enterprise integrations.
• Develop reusable security patterns addressing recurring cloud security design challenges within the VA environment.
• Provide cloud-security subject matter expertise during technical design reviews architecture reviews pilots use-case development modernization initiatives and enterprise transformation efforts.
• Support secure cloud modernization by evaluating existing environments and recommending migration re-architecture modernization or security-hardening approaches.
• Develop and maintain cloud security configuration baselines aligned with Federal standards VA requirements and industry best practices.
• Assess cloud-native platforms against approved security baselines and identify configuration deviations compliance gaps and required remediation actions.
• Develop recommendations for maintaining a consistent secure and compliant configuration posture across cloud environments.
• Support lifecycle governance and traceability from security controls and architectural requirements through system implementation and final ATO.
• Establish security requirements and engineering considerations for cloud systems and document those requirements for implementation teams.
• Support development of Security Requirements Needs Documents Security Engineering Consideration Plans configuration reports and security assessment reports for cloud technologies.
• Conduct specialized cloud security posture reviews and document associated risks findings and recommendations.
• Identify evaluate monitor and communicate cloud cybersecurity risks using established Federal and VA risk-management processes.
• Evaluate cloud services and architectures for compliance with applicable NIST FISMA FedRAMP CIS Controls HIPAA VA security and privacy requirements.
• Support implementation of security and privacy requirements applicable to cloud environments under VA Risk Management Framework for Cloud Computing Services.
• Support cloud system authorization by gathering validating and maintaining evidence demonstrating implementation of required security controls.
• Assist system owners and technical teams in identifying and resolving ATO accreditation security-control or compliance issues associated with cloud services.
• Recommend compensating measures and mitigation strategies when design or implementation constraints create security-control gaps.
• Support secure identity and access-management architecture for cloud environments in alignment with VA and Federal identity credential and access-management requirements.
• Evaluate cloud environments for appropriate implementation of least privilege identity controls access restrictions and enterprise authentication requirements.
• Support secure cloud networking data protection application security infrastructure hardening integration lifecycle management and security-tool implementation.
• Collaborate with DevSecOps engineers cybersecurity architects security engineers developers system owners risk and compliance analysts program managers and Government stakeholders throughout the cloud solution lifecycle.
• Provide technical input into VA security policies standards guidelines technical positions white papers and risk-mitigation recommendations involving cloud technologies.
• Develop technical briefings and presentations explaining cloud architecture risk posture security findings compliance status and recommended courses of action to both technical and executive stakeholders.
• Participate in VA governance boards technical-review committees architecture forums and engineering working groups involving cloud security or modernization.
• Support continuous improvement of cloud security by monitoring emerging threats technology changes compliance requirements and evolving Federal cloud-security standards.
• Ensure cloud architectures remain aligned with enterprise security architecture modernization initiatives technology roadmaps and Government strategic objectives throughout their lifecycle.

Requirements:

• Minimum of10 years of Information Security Experience of which at least 5years areof Cybersecurity and Cloud Security experience at a large Government agency similar in size/scope to GSA IRSDoDor VA.

• Expertise incybersecurity architecture and engineering requirements and authorizations (FedRAMP/RMF) into systems and applications.

• Expertisein IT and Cloud security architecture design security engineering development systems engineering and implementation efforts.

• Expertise inCloud solutions infederaland/or commercial industry.

• Expertisewith Federal A&A and ATO activities.

• Expertise withsecurity compliance requirements and regulatory standards (e.g. NIST FISMA FedRAMP CISControlsHIPAA).

Preferred/Desired:

• Bachelors degree inBusiness Administration Business Management Cybersecurity Computer Science Information Systems Information Assurance Information Security Information Resource Management or related fields.
• CASP (SecurityX) CCISO CISA CISM CISSP CISSP-ISSAP CISSP-ISSEP GCED GCIH GSLC CCNP Security

9thWay Insignias range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job education experience knowledge skills and abilities as well as internal equity alignment with market data applicable bargaining agreement (if any) or other law.

Clearance/Background Investigation
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Benefits
Eligible employees will have access to our comprehensive benefits package which includes Medical Dental Vision Voluntary Life Insurance 401(k) Basic Life A&D STD LTD PTO Telehealth paid holidays FSA HSA. Additional resources include our Employee Assistance Program (EAP) and Traveling Assistance.

Legal
Were an equal employment opportunity employer that empowers our people to fearlessly drive change no matter their race color religion sex (including pregnancy childbirth lactation or related medical conditions) national origin age marital status sexual orientation gender identity disability veteran status military or uniformed service member status genetic information or any other status protected by applicable federal state or local law.

Equal Employment Opportunity Notice
Applicants have the right to be free from unlawful workplace discrimination. Please review the EEOCs Know Your Rights: Workplace Discrimination is Illegal notice. Accessible formats and translations are also available from the EEOC.

Application Accommodations
If you require a reasonable accommodation to complete this application or participate in the hiring process please contact Requests will be considered individually.