Overview

Cloud Engineer builds and maintains cloud infrastructure, underline security, and network continuity.

Responsibilities

a. Identity, Credentialling, System Integration, and Identity Management (ICAM/IdM) Subject Matter Expertise in tying (a) data to data sensitivity, (b) users to identity vetting, and (c) identity vetting to data sensitivity. This includes both PKI-based Personnel Entities (PE's) and Non-Personnel Entities (NPE's) for multiple cloud environments (ex. AWS, Azure, Google, etc.) and cloud-to-cloud encrypted interconnections. This includes separated authentication and authorization systems, without or with limited identity vetting for limited access scenarios (ex. xiid);b. Asset and Inventory Management (AIM)\System Integration Subject Matter Expertise with experience integrating and interfacing Continuous Diagnostics and Mitigation (CDM) platforms;c. Security Monitoring Subject Matter Expertise in the ability to design and provide configuration templates for large-scale implementation of Command Line Session Logs (ex. sudoreplay), Container Logs (ex. kubectl logs), Kernel Sandboxing / Unikernel (ex. eBPF, Nemesis, Exokernel) violations, inter-cloud tracking mechanisms (ex. Cloud Tagging / tag key's for cloud-to-cloud authentication interconnections), sessions between containers and users (ex. Ingress on Kubernetes), and Mutual Transport Layer Security (mTLS) Reverse Proxy Client or Session-Based Whitelist (ex. Nginx, Blackridge IP cloak);d. Cloud and Network Engineering Subject Matter Expertise with a solid foundation in cloud technologies (such as AWS, Azure, Google, Salesforce, etc.). Examples of relevant skills include integrating and encrypting in-transit between large-scale Cloud and non-Cloud-based email interfaces and head-ends, as well as the in transit encryption of all internal traffic data, per the requirements of Executive Order (EO) 14028;e. Programming / Code Vetting Subject Matter Expertise. Required minimum language support shall include: Java, Python, SQL, and JSON, using standards consistent with EO 14028 and NIST Guidelines on Minimum Standards for Developer Verification of Software

Qualifications

The Cloud SMEs shall have a minimum of nine (9) years technical work experience, with two years’ minimum in the technical SME specialty, that demonstrates:i. SMEs shall offer expertise using scalable cloud infrastructure and capabilities available as services. Utilizing multi-tiers of cloud computing specification and resources across the DHS Enterprise.ii. A solid foundation in performing hands-on proof-of-concept, proof-of-principal, pilot, or prototyping new technologies or methodologies in lab environments.iii. Hands-on experience integrating new technologies or methodologies into existing security technologies applicable towards Zero-Trust, Public Key Infrastructure / Public Key Encryption (PKI/PKE), Identity and Credential Access Management (ICAM), and Internetworking (both cloud-based and non-cloud-based) to include IPv6 security;iv. SMEs shall be familiar with the Zero Trust (ZT) Maturity Model, ZT Concepts for Federal Government Architectures, Supply Chain Risk Management (SCRM) concerns (as defined by Cybersecurity and Infrastructure Security Agency (CISA), Intelligence Community, National Institute of Standards and Technology (NIST), Department of Defense, and/or Department of Justice), and current ZT guidance applicable towards the Federal Government.