What are the responsibilities and job description for the Systems Security Specialist position at ANGARAI?
About the Role:
ANGARAI – a professional management consulting firm – is seeking a Systems Security Specialist to support a key government client in ensuring the security, compliance, and resiliency of its IT infrastructure. The ideal candidate will have hands-on experience in cloud and application security, Identity and Access Management (IAM), incident response, and system governance for mission-critical systems.
Key Responsibilities:
Develop and implement cloud security controls, processes, and automation tools (AWS/Azure).
Conduct system-wide security assessments and cloud penetration testing.
Monitor cloud and on-prem systems, identify security vulnerabilities, and provide remediation.
Perform incident response and forensic evaluations using SIEM tools.
Support the secure design and implementation of applications across the SDLC.
Maintain and update security documentation including Security Plans, POA&Ms, Risk Assessments, and more.
Manage and maintain IAM solutions including ForgeRock and SailPoint.
Perform account provisioning, access reviews, and implement role-based access control.
Configure and manage firewalls and access controls (e.g., AWS Security Groups, WAF).
Evaluate proposed changes for security impacts and maintain secure configuration baselines.
Comply with applicable NIST, IRS 1075, MARS-e, and other federal/state standards.
Requirements
Required Qualifications:
2 years of experience in security operations, governance, and compliance.
Proven hands-on experience with cloud security (AWS preferred).
Experience with SIEM, incident response, and forensics.
Knowledge of AWS security features: GuardDuty, Macie, CloudTrail, CloudWatch, etc.
Experience with administering and monitoring IAM tools and performing user access control tasks.
Hands-on experience with Windows and Linux OS security administration.
Familiarity with federal security frameworks such as NIST SP 800-53.
Preferred Qualifications:
4 years experience with ForgeRock and SailPoint IAM products.
Strong experience performing penetration testing and vulnerability assessments.
Familiarity with ACL configuration, password policies, and group management in enterprise environments.
Scripting experience (Java, JavaScript, Shell).
Experience configuring ASA or Fortinet firewalls.
Prior experience working in a government agency or regulated environment.
Experience supporting PMO governance and compliance processes.
Certifications (Preferred):
CISSP, CISA, CCSP, CEH, ISO 27001, CSA STAR Cloud Security, or equivalent.