• Collaborate with the team to build, deploy, and manage instances of FedRamp compliant cloud-based infrastructure and services in AWS GovCloud environments.
• Maintain system security strategies, policies, and procedures in support of Approval to Operate (ATO) certifications and the Confidentiality, Integrity and Availability (CIA) triad.
• Conduct regular CVE (Common Vulnerabilities and Exposures) scans and assessments to identify and mitigate vulnerabilities in our cloud-based resources.
• Monitor system logs, investigate, and respond to security questions.
• Configure and maintain Virtual Private Cloud (VPC) configurations to ensure network isolation, security, and performance.
• Implement and manage network access controls, security groups, and IP whitelists.
• Manage user identities and role-based access control in AWS through IAM (Identity and Access Management) policies.
• Develop and maintain role-based access control strategies to enforce the principle of least privilege (PoLP) and ensure only authorized personnel have access to resources.
• Implement data security strategies for data at rest and in transit to prevent data spills and ensure compliance with data privacy regulations.

Qualifications

• Bachelors in a relative technical discipline and five (5) years or more experience; Masters and three (3) years or more experience; PhD and 0 years related experience. Additional experience will be considered in lieu of a degree.
• Candidate must be a US Citizen and able to obtain DHS Suitability Public Trust.
• Experience with AWS Cloud services including IAM, VPC, EC2, S3, and CloudWatch.
• Experience performing CVE scans and managing system updates.
• In-depth knowledge and understanding of Linux server administration and user management including use of the command line interface.
• Prior experience with government ATO processes, procedures, and security best practices including multi-factor authentication.
• Fully understands and complies with FedRamp and FISMA requirements and procedures for cloud computing.
• Willing to iterate and adapt system support requirements to changing requirements and conditions.
• Strong writing skills and the ability to clearly articulate and document technical plans, findings, and recommendations.

Desired Qualifications:

• AWS, Azure, and/or GCS certification.
• Hands-on experience administering and maintaining hybrid cloud architectures in configuration controlled environments.
• Demonstrated experience making administrative decisions based on information assurance standards, scalability, extensibility, supportability, and sustainability.
• Experience with internet routing protocols and concepts: TCP/IP, BGP, MPLS, ISIS and/or OSPF.
• Experience with administration and configuration of multiple concurrent cloud environments.
• Experience with secrets management, data encryption, and data lifecycle policies.

SAIC accepts applications on an ongoing basis and there is no deadline.

Covid Policy: SAIC does not require COVID-19 vaccinations or boosters. Customer site vaccination requirements must be followed when work is performed at a customer site.