Security Engineer Lead

Edgewater is currently seeking a Senior Azure Cloud Security Engineer to support our federal customer in the Washington DC area.

Responsibilities include:

· Maintain and improve the security posture of the FERC Azure platform by identifying, and remediating vulnerabilities by using a variety of security tools.

· Implement and configure security controls and policies across the FERC IT infrastructure to manage access to data and monitor threats to ensure that data, apps, containers, and networks are protected.

· Implement and maintain native tools like Microsoft Defender for Identity, Microsoft Defender for Cloud, Microsoft Defender for IoT, Defender for O365 and Microsoft Sentinel.

· Lead IT analysts, security administrators and security engineers to collaborate effectively to enhance communication and build effective division-wide processes.

· Facilitate the secure migrations of on-prem application to the Azure cloud.

· Identify areas of weakness and work with FERC stakeholders to mitigate risks.

· Work with the Software Engineering team to ensure all systems are properly hardened during the implementation process.

· Provide coaching and mentoring to Security Engineering team members

· Provide oversight on Security Product Reviews and Static Code Reviews

· Provide briefings to management on findings and recommendations.

Requirements:

· Bachelor’s degree in cyber security, information technology or related field or equivalent experience working in field.

· 5 years of IT team leadership.

· 10 years of experience supporting IT with 2 years in cybersecurity.

· 3 years of experience working with Microsoft native tools like Microsoft Defender for Identity, Microsoft Defender for Cloud, Microsoft Defender for IoT, Defender for O365 and Microsoft Sentinel.

· Good understanding of security concepts (Zero Trust Network, CASB, Cloud computing.

· Technical skills with Linux and Windows operating systems and scripting languages like PowerShell, Python, .Net.

· Soft skills set to successfully understand, challenge, and translate the business needs and communicate to the relevant parties with a structured and methodical approach to problem solving.

· Good communicator with passion for the domains of Cyber Security.

· Agile, Scrum, DevSecOps knowledge.

· Security certification (CISSP or equivalent preferred).

Preferred:

· Strong understanding of Security tools such as Splunk, Tenable, Firepower, WebInspect, ForcePoint and Identity and Privileged Access Management (IAM/PAM) applications.

· Strong knowledge of Active Directory and/or LDAP management, configuration or design, PKI, SSO across multiple domains, 2FA via PIV, or CAC and scripting and coding.

· Exposure and/or experience with IAM/PAM tools like CyberArk, OneIdentity Safeguard, SIEM solutions, PKI, and DevSecOps.

· Strong understanding of Security processes in the Government sector.

· Good interpersonal skills also required to work closely together with products owners and cloud architects to help build a secure and robust enterprise-grade cloud platform.

· Certifications in Azure Security Engineer, and industry certifications are considered as beneficial e.g., CISSP, CSSP, CCSK, GIAC.

Edgewater Federal Solutions is a privately held government contracting firm located in Frederick Maryland. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named a Top Workplace in the Greater Washington Area Small Companies category for the last 6 years.