Cybersecurity Cloud SME responsible for ensuring cloud architectures and systems meet DoD security and compliance requirements. Provides expertise in cloud security, threat mitigation, monitoring, and vulnerability assessments, while advising programs on secure deployment and maintaining a strong security posture.
Location: Onsite in Columbus, OH; or Richmond, VA
Security Clearance: Secret
Cybersecurity Cloud Subject Matter Expert (SME) ensures the architecture and design of cloud-hosted IT systems are secure and meet DOD requirements. Reviews Cloud security policy and provides recommendations for improvement to enhance the security posture within the cloud as well as the ability to meet protection, detection, monitoring and response requirements for systems and data. Applies knowledge of current advances in cloud security engineering and cloud security threats to provide support for the deployment of programs and applications. Provides input to programs throughout the process of deployment to ensure systems meet DOD compliance requirements. Provides guidance to assessment staff in the performance of Cybersecurity Vulnerability Assessments as related to cloud hosting environments.
Required Qualifications:
· Two (2) years of experience achieving ATOs in a cloud environment (OCI, AWS, Azure, GCP)
· Five (5) years of achieving ATOs for compartment DoD IT systems
· DOD Secret Clearance
· Must possess IT-II Non-Critical Sensitive security clearance or Tier 3 (T3)
· 8140 Baseline Certification: Primary DCWF Work Role 521: Cyber Defense Infrastructure Support - Proficiency Level: Intermediate
Candidate must possess one of the following certifications:
o CEH, Cloud+, CySA+, PenTest+, SSCP, Security+, and GSEC
Note: higher or advanced GIAC or CISSP concentrations also satisfy the intermediate requirement
· 8140 Baseline Certification: Secondary DCWF Work Role 441: Network Operations Specialist - Proficiency Level: Intermediate
Candidate must possess one of the following certifications:
o CompTIA Security+, CompTIA Cloud+, CEH (Certified Ethical Hacker), SSCP, and select GIAC credentials (such as GSEC, GCIH, or GICSP)
· Computing Environment Certification: Cloud Security Certification (OCI, AWS, Azure, GCP)