Cloud Engineer

Role: Cloud Engineer - Intermediate

Location: Carlisle Barracks, PA

Education/Certifications: Assoc/Tech degree preferred (not required); Minimum HS Diploma or GED; Relevant System Certifications

Years of Experience: At least 4 years of relevant work experience

ClearanceLevel & Investigation: Interim Secret (requires U.S. citizenship)

IA Cert Level (DoD 8570.01): IAT 2

Computing Environment Certifications: Relevant System Certifications

JobDescription:

• Design computer security architecture and develop detailed cyber security designs.
• Develop, execute, and track performance of security measures to protect information.

Additional Responsibilities:

• Manage, configure, and maintain commercial AWS content management system.
• Configure server settings, backups, and securely configure AWS Commercial services.
• Assist organizations using Word Press with configuring sites with Plesk or other management services.
• Conduct administrative requirements for Amazon Cloud and/or other cloud-based Government environments.
• Serve as subject matter expert or systems engineer to ensure cloud-based enclaves meet best business practices, security standards, and local mission requirements.
• Provide documentation on all design, configuration, security requirements, and best business practices employed within AWS cloud and/or other cloud-based environments.
• Operate and maintain all government-directed services in Amazon cloud-based environment to include but not limited to Web Services, Application Services, Database Services, Authentication Services, and continuation of services, API.
• Monitor and maintain security best business practices for a DOD cloud environment.
• Conduct administrative requirements for Amazon Cloud and/or other cloud-based Government environments.
• Must possess knowledge and skills in compute, networking, storage, and database AWS services as well as AWS deployment and management services.
• Must possess knowledge and skills in deploying, managing, and operating workloads on AWS as well as implementing security controls and compliance requirements.
• Must possess knowledge and skills in using AWS Management Console and AWS Command Line Interface (CLI), and an understanding of AWS Well-Architected Framework, AWS networking, security services, and AWS global infrastructure.
• Must have ability to identify which AWS services meet a given technical requirement and define technical requirements for AWS-based application.
• Must possess professional experience using AWS technology, AWS security best practices, AWS storage options and underlying consistency models, and AWS networking nuances and how they relate to integration of AWS services.
• Must possess knowledge of advanced networking architectures and interconnectivity options.
• Must have familiarity with development of automation scripts and tools, including design, implementation, and optimization of routing architectures (including static and dynamic); multi-region solutions for a global enterprise; highly available connectivity solutions.
• Must have knowledge of CIDR and sub-netting (IPv4 and IPv6); IPv6 transition challenges; and generic solutions for network security features, including AWS WAF, IDS, IPS, DDoS protection, and economic denial of service/sustainability (EDoS).
• Must possess experience developing code in at least one high-level programming language; building highly automated infrastructures; and administering operating systems.
• Must possess understanding of modern development and operations processes and methodologies
• Must have ability to implement and manage continuous delivery systems and methodologies on AWS.
• Must have ability to implement and automate security controls, governance processes, and compliance validation.
• Must have ability to define and deploy monitoring, metrics, and logging systems on AWS.
• Assist with supporting cloud-based service with CAMO and cArmy Coordination as required.
• Provide continuous maintenance of AWS and Azure .Edu environments ensuring full compliance with DoD RMF accreditation requirements.
• Maintain vulnerability assessment application instance inside cloud environment.
• Maintain Azure/Microsoft Office 365 Defender (Security and Compliance).
• Deploy and maintain IDS/IPS in current cloud environment.
• Deploy and maintain firewalls in cloud environment.
• Implement and maintain application security solutions.
• Provide scalable backup and storage solutions.
• Implement and maintain messaging solutions.
• Configure continuous monitoring system provided by Customer for environment that allows alert notifications, firewall and IDS monitoring, and DNS management.
• Maintain development, staging, and production environment that allows controlled cutover operations and minimizes risk of data loss.
• Maintain patch management solutions under guidance of ISSM/ISSO.
• Implement and maintain remote administration.
• Work with current/future Cloud Security Service Providers (CSSP) and Government Agencies such as, but not limited to, C5ISR.
• Support provision of cloud-based application updates and maintenance services.
• Analyze functional user requirements and current system capabilities to support establishment of plan for adjusting system, plan, test, and implement changes to web/database applications.
• Provide informal functional training and documentation necessary for Customer personnel to effectively utilize automated system.