Cloud Security Engineer (Architect)

Quick Facts

• Role: Cloud Security Engineer (Architect)
• Focus: Security engineering for GSA cloud and IT systems, integrated into the IT SDLC

Description

You will identify risks and make corrective security and technology recommendations to secure GSA cloud systems. You will develop and maintain a security engineering framework and related processes, ensuring security is embedded throughout IT architecture and delivered as a formal program capability. You will also review and approve security architectures before system build, pilot security solutions, and provide security consulting and engineering support across cloud and enterprise initiatives.

Responsibilities

• Develop and maintain a security engineering framework, processes, and guidelines integrated into the GSA IT System Development Lifecycle (SDLC)
• Embed security in IT architecture across system/cloud architecture, secure API integration, required technical controls, cryptography, hash functions, and key material handling
• Ensure project components (software, hardware, communications, process, integrations) work as a single secure system delivering business functionality
• Pilot security solutions, procure needed hardware/software, implement, and formally assess effectiveness against GSA IT security requirements
• Review and approve proposed security architectures prior to system build; advise on restructuring/re-architecting networks for secure placement and configuration of network security tools
• Design and integrate software or process interfaces to resolve complex and evolving IT security issues
• Ensure new technologies are implemented per IT Security Engineering standards and integrated into agency strategic IT/security architecture with no security gaps
• Provide security consulting and engineering support for GSA information systems and emerging initiatives, including cloud computing, BYOD, Virtual Desktop Infrastructure, mobile devices, remote access systems, mobile computing platforms, Active Directory, system virtualization, physical access control systems, and identity and access management

Requirements

• U.S. citizenship or National (excluding residents of American Samoa and Swains Island)
• Meet eligibility requirements within 30 days of closing date
• If male born after 12/31/1959: register with Selective Service
• Tier 2 background investigation required if selected
• Identity/work eligibility verification via DHS e-Verify if not a GSA employee
• Complete a financial disclosure report
• At least one year specialized experience equivalent to GS-13 level or higher in federal service
• Specialized experience must include validating security control implementations in cloud-native environments, including:
  • Analyzing outputs from automated scanning/assessment tools (e.g., automated vulnerability scanners)
  • Planning, developing, or maintaining an organization-wide information security program
  • Implementing and evaluating security controls across enterprise systems and cloud-based environments
  • Conducting security reviews (system assessments, vulnerability identification, corrective action tracking)
  • Providing technical guidance to leadership and collaborating across teams to resolve complex security issues (e.g., coordinating with cloud provider engineers on gaps in security authorization packages)

Benefits

• Health insurance (multiple plan options)
• Life insurance coverage
• Sick leave and vacation time, including 11 paid holidays per year
• Thrift Savings Plan (similar to a 401(k))
• Transit and child care subsidies
• Flexible spending accounts
• Long-term care insurance
• Training and development

Eligibility for benefits depends on the position type and whether the role is full-time, part-time, or intermittent.