Information Technology Security Engineer

3 weeks ago


Washington, United States HRUCKUS Full time

Veteran Firm Seeking a Senior Security Cloud Engineer for a Remote Assignment in Washington, DC


My name is Stephen Hrutka, and I lead a Veteran-owned consulting firm in Washington, DC, focused on strategic sourcing, supply chain, and IT Staffing.


We are looking to fill a Senior Security Cloud Engineer role for the DHCF - Department of Health Care Finance in the DC Government.


The ideal candidate has 16+ years of experience developing, leading, and executing information security incident response plans, 15+ years of experience working in the field of Cloud cybersecurity, and 5+ years of knowledge of federal and industry-specific regulations and compliance requirements related to cybersecurity (e.g., FISMA, HIPAA, GDPR).


If you’re interested, I'll gladly provide more details about the role and further discuss your qualifications.


Thanks,

Stephen M Hrutka

Principal Consultant


Executive Summary: HRUCKUS is looking to hire a Senior Security Cloud Engineer for the DHCF - Department of Health Care Finance to directly support the DC Access System (DCAS) in the DC Government. As a member of the DCAS Security team, you will participate and contribute to the design, build, and operational support of cloud security architecture.


Position Overview: The DC Department of Health Care Finance, District of Columbia Access System (DCAS) seeks a qualified and experienced Security Cloud Engineer to enhance and manage the organization's cybersecurity posture. The selected candidate will play a crucial role in safeguarding sensitive data, ensuring compliance with regulations, and strengthening the agency's overall security framework on a contract basis. The Cybersecurity Cloud Engineer will be responsible for assessing, implementing, and maintaining the security measures necessary to protect the organization's digital assets and information.


Scope of Work: The Security Cloud Engineer will support the District of Columbia Access System (DCAS) under the Technical Program manager to identify security vulnerabilities, design and implement security solutions, monitor security systems, and respond to security incidents impacting DHCF on-premises and cloud-hosted resources. The contractor shall provide subject matter expertise in the design, development, and implementation of security best practices, which include, but are not limited to, network security, application security, access control, and security policy development.


Position Requirements and Duties:

  • In-depth knowledge of cloud security best practices, principles, and technologies, including IAM, encryption, network security, container security, and serverless security.
  • Hands-on experience with cloud security tools and services such as AWS Security Hub, AWS native security services, Cloud Trail, guard duty, security groups, and Cloud Watch.
  • Review the design and implementation of secure AWS cloud architecture solutions, including VPC configurations, security groups, IAM policies, encryption mechanisms, and logging and monitoring for the AWS cloud environment.
  • Conduct vulnerability assessments and penetration testing on AWS infrastructure and applications. Develop and implement remediation plans to address security vulnerabilities and weaknesses.
  • Strong understanding of security compliance requirements and frameworks (e.g., GDPR, HIPAA, SOC 2, ISO 27001) and experience implementing controls and measures to achieve compliance.
  • Proficiency in scripting and automation for security automation and orchestration.
  • Excellent analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.
  • Provide security training and guidance to AWS users, developers, and administrators to promote a culture of security awareness and compliance within the organization.


Position Responsibilities:

1. Expertise in implementing, administrating, and operating information security technologies such as firewalls, IDS/IPS, SIEM, Antivirus, network traffic analyzers, and malware analysis tools.

2. Utilizes advanced experience with scripting and tool automation such as Perl, PowerShell, and Regex.

3. Develops, leads, and executes information security incident response plans.

4. Develops standard and complex IT solutions & services, driven by business requirements and industry standards.

5. May also leverage dynamic and static code assessment tools to measure vulnerability of applications throughout the SDLC.


Minimum Education/Certification Requirements:

  • BS Degree in IT, Computer Science, or Engineering, or equivalent experience
  • Master’s Degree in Engineering or Computer Science is HIGHLY PREFERRED


Skills Matrix:

Skill/ Required/ Desired/ Years

Minimum of 15 years of experience working in the field of Cloud cybersecurity/ Required/ 15

Knowledge of federal and industry-specific regulations and compliance requirements related to cybersecurity (e.g., FISMA, HIPAA, GDPR)/ Required/ 5

Experience in preparing for and participating in security audits and assessments for Cloud environments/ Required/ 5

Expertise in AWS network security, including AWS firewalls/ Required/ 10

Proficiency in security technologies such as SIEM (Security Information and Event Management) systems and endpoint protection solutions for AWS/ Required/ 5

Demonstrated ability to develop and implement security policies, procedures, and standards/ Required/ 10

Strong understanding of AWS cloud security principles and best practices/ Required/ 10

16+ yrs. developing, leading, and executing information security incident response plans/ Required/ 16

16+ yrs. developing standard and complex IT solutions & services, driven by business requirements and industry standards/ Required/ 16

BS Degree in IT, Cybersecurity, Engineering, or equivalent experience/ Required



  • Washington, United States Fusion Technology Full time

    Who is Fusion Technology? Fusion Technology is a performance-driven HUBZone Small Business concern residing in the heart of the beautiful mountainsides of West Virginia, steps away from the Federal Bureau of Investigation's Criminal Justice Information Services Division's Headquarters. Founded in 2007 by an Engineer-by-trade, Fusion Technology dedicates our...


  • Washington, United States Fusion Technology Full time

    Who is Fusion Technology? Fusion Technology is a performance-driven HUBZone Small Business concern residing in the heart of the beautiful mountainsides of West Virginia, steps away from the Federal Bureau of Investigation's Criminal Justice Information Services Division's Headquarters. Founded in 2007 by an Engineer-by-trade, Fusion Technology dedicates our...


  • Washington, United States Information Protection Solutions Full time

    Job DescriptionJob DescriptionRESPONSIBILITYAnalyze science, engineering, business, and other data processing problems to implement and improve computer systems. Analyze user requirements, procedures, and problems to automate or improve existing systems and review computer system capabilities, workflow, and scheduling limitations. May analyze or recommend...


  • Washington, United States Fusion Technology LLC Full time

    Job DescriptionJob DescriptionWho is Fusion Technology?  Fusion Technology is a performance-driven HUBZone Small Business concern residing in the heart of the beautiful mountainsides of West Virginia, steps away from the Federal Bureau of Investigation's Criminal Justice Information Services Division's Headquarters. Founded in 2007 by an...


  • Washington, United States Judicial Branch Full time

    Summary The Information Technology Specialist (Security) position is located in the Department of Administrative Services (DAS), Administrative Systems Office (ASO), Security and Data Integration Staff (SDIS). The SDIS is responsible for administering and overseeing the system security...


  • Washington, United States Pierce Technology Corp Full time

    Job DescriptionJob Description⦁ Utilizes knowledge of SiEM solutions like Splunk, Rapid7 Insight IDR etc.⦁ Develops and maintains documentation for security systems, procedures, and security diagrams.⦁ Analyzes, proposes, and implements solutions concerning residual risk, vulnerabilities, and other security exposures.⦁ Installs security measures and...


  • Washington Highlands, Washington, D.C., United States Pierce Technology Corp Full time

    ⦁ Utilizes knowledge of SiEM solutions like Splunk, Rapid7 Insight IDR etc. ⦁ Develops and maintains documentation for security systems, procedures, and security diagrams. ⦁ Analyzes, proposes, and implements solutions concerning residual risk, vulnerabilities, and other security exposures. ⦁ Installs security measures and operates software to...


  • Washington, United States Puyenpa Services LLC Full time

    The Puyenpa family of companies are comprised of multiple SBA Certified Native American Tribal 8(a) and multi-certified organizations focused on delivering Information Technology, Management Consulting, and General Construction solutions to the Federal Government along with the Commercial Sector. We are actively seeking an Information Technology (IT) Systems...


  • Washington, United States Judicial Branch Full time

    Summary This position is in the Office of the Chief Operating Officer (COO) Information Security & Validation Staff (ISVS) in the Department of Technology Services (DTS). The Department of Technology Services (DTS) provides an array of enterprise services to the Judiciary, both for...


  • Washington, United States Judicial Branch Full time

    Summary This position is located in the Department of Technology Services, Information Technology Security Office, Security Operations Division. ...


  • Washington, United States Fusion Technology Full time

    Who is Fusion Technology? Fusion Technology is a performance-driven HUBZone Small Business concern residing in the heart of the beautiful mountainsides of West Virginia, steps away from the Federal Bureau of Investigation's Criminal Justice Information Services Division's Headquarters. Founded in 2007 by an Engineer-by-trade, Fusion Technology dedicates our...


  • Washington, Washington, D.C., United States Judicial Branch Full time

    Summary The Information Technology Specialist (Security) position is located in the Department of Administrative Services (DAS), Administrative Systems Office (ASO), Security and Data Integration Staff (SDIS). The SDIS is responsible for administering and overseeing the system security requirements for various Human Resources, Financial, Facilities and AO...


  • Washington, United States Watershed Security Full time

    COMPANY OVERVIEW Watershed Security is a Veteran Owned Small Business and a leader in providing quality Cyber Security Services to the Federal Government. Watershed is a great place to work, offering a challenging and respectful work environment. We are growing fast and strive to deliver our vision every day: “To inspire trust and respect with our...


  • Washington, United States Watershed Security Full time

    COMPANY OVERVIEW Watershed Security is a Veteran Owned Small Business and a leader in providing quality Cyber Security Services to the Federal Government. Watershed is a great place to work, offering a challenging and respectful work environment. We are growing fast and strive to deliver our vision every day: “To inspire trust and respect with our...


  • Washington, United States Fusion Technology Full time

    Who is Fusion Technology? Fusion Technology is a performance-driven HUBZone Small Business concern residing in the heart of the beautiful mountainsides of West Virginia, steps away from the Federal Bureau of Investigation's Criminal Justice Information Services Division's Headquarters. Founded in 2007 by an Engineer-by-trade, Fusion Technology dedicates our...


  • Washington, United States Department Of State Full time

    Summary This serves as a public notice for the use of the Direct Hire Authority in accordance with 5 U.S.C. 3327 and 3330 and 5 CFR 330. These positions are to be filled under the OPM Government-Wide Direct Hire Authority for Information Technology Specialist (Information...


  • Washington, United States Watershed Security Full time

    Job DescriptionJob DescriptionCOMPANY OVERVIEWWatershed Security is a Veteran Owned Small Business and a leader in providing quality Cyber Security Services to the Federal Government. Watershed is a great place to work, offering a challenging and respectful work environment. We are growing fast and strive to deliver our vision every day: “To inspire trust...


  • Washington, United States Fusion Technology LLC Full time

    Job DescriptionJob DescriptionWho is Fusion Technology?  Fusion Technology is a performance-driven HUBZone Small Business concern residing in the heart of the beautiful mountainsides of West Virginia, steps away from the Federal Bureau of Investigation's Criminal Justice Information Services Division's Headquarters. Founded in 2007 by an...


  • Washington, United States Washington Penn Full time

    Job Description Job Description The VP of Information Technology leads the planning, implementation, and operation of information technology to enable the achievement of the organization’s business objectives across all Audia companies globally. The VP of IT is responsible for the effective design, development, implementation, and operation of IT products,...


  • Washington, United States Judicial Branch Full time

    Summary This position is located in the Department of Technology Services (DTS), Information Technology Security Office (ITSO), Security Operations Division (SOD). ...