What are the responsibilities and job description for the Cloud Security Engineer - Mid position at Nalley Consulting?
Position: Cloud Security Engineer
LCAT: Mid
Location: SOUTHCOM HQ, Doral, FL / Off-site
Office: U.S. SOUTHERN Command J2
Required clearance: Secret
Required education: Bachelor's degree in Cybersecurity, Information Assurance, or a related field, or five (5) years of equivalent experience in cloud security engineering.
Description:
Required Experience:
LCAT: Mid
Location: SOUTHCOM HQ, Doral, FL / Off-site
Office: U.S. SOUTHERN Command J2
Required clearance: Secret
Required education: Bachelor's degree in Cybersecurity, Information Assurance, or a related field, or five (5) years of equivalent experience in cloud security engineering.
Description:
- Implement and maintain cloud security frameworks, ensuring compliance with NIST 800-53 Rev. 5, FedRAMP, and DoD IL-4/IL-5 security mandates.
- Configure and manage Identity and Access Management (IAM) solutions, role-based access controls (RBAC), and Zero Trust Architecture (ZTA) principles.
- Conduct vulnerability assessments, security monitoring, and incident response within cloud environments.
- Develop and maintain System Security Plans (SSP), Security Assessment Reports (SAR), and Plans of Action & Milestones (POA&M).
- Provide the Cloud Security Compliance & Risk Report, ensuring all cloud-based operations remain in accordance with DoD security requirements.
Required Experience:
- The ideal personnel possess the knowledge and capability to implement security controls and frameworks within cloud environments, ensuring compliance with NIST 800-53 Rev. 5, FedRAMP, and DoD IL 2, 4, and 5 security policies.
- Personnel must be proficient in identity and access management (IAM), security monitoring, and cloud-native security solutions.
- Personnel must have demonstrated experience in implementing cloud security frameworks, configuring identity and access management (IAM) solutions, and conducting vulnerability assessments in cloud environments.
- Experience with SIEM tools, zero-trust architecture, and cloud security monitoring solutions is required.
- Desirable but not required certifications include CISSP, AWS Certified Security‚ AI Specialty, or Microsoft Certified: Security, Compliance, and Identity Fundamentals.
ABOUT NALLEY CONSULTING
Nalley Consulting is a Service Disabled Veteran Owned Small Business working with prime partners to staff Department of Defense and Intelligence Community positions. Created by a U.S. Navy intelligence veteran, Nalley Consulting has grown to include multiple IDIQ vehicles in several states.
Nalley Consulting fringe benefits include:
- Excellent medical, dental, and vision benefits
- PTO
- 11 paid federal holidays
- Tuition assistance
- Paid military-reserve leave
- Paid parental leave for birth or adoption
- 401k matching up to 5 percent of the base salary
- Flex time
- Company-paid short-term disability, long-term disability, and life insurance.