Cloud Security Architecture

1. Create and Organize an Agency Cloud Smart Center of Excellence to adopt Agency and Enterprise Cloud Smart Strategies. 2. Lead Agency efforts to leverage Cloud Security detection and monitoring tools (i.e. Microsoft Defender for Cloud, etc.) from the Enterprise. a. These tools will monitor and scan Cloud workloads and servers to ensure they are securely configured (configuration management) and not vulnerable. b. Attack Surface Management c. Work with DAS teams (Enterprise) for implementation of Agency roles and responsibilities delegation (RACI) d. Workloads, container, and orchestration (i.e. Docker /Kubernetes) security and configuration of Agency Applications. e. Define standard controls & protections across cloud providers for Agency Applications and Services with related configuration documentation. 3. Leading and Incorporating Enterprise and Agency Cloud Security Architecture into the Agency DevSecOps /DevOps program 4. Working with Agency DevOps teams to drive adoption across the Agency 5. Establish Agency Standard Operating Procedures for Cloud Security Architecture 6. Work with Agency and Enterprise Architecture team to establish Reference Architecture(s) 7. Review solutions and define review criteria for compliance to Agency and Enterprise Cloud Architecture Standards and Reference Architecture 8. Participating on Project Teams to advise on Cloud Security Architecture for Agency Applications and Services. 9. Provide Training materials and Training sessions to Agency Security Team members in related tools and processes 10. Knowledge transfer / Shadowing of Agency Security Team members Skills CISSP certification is preferred and/or accredited certifications, such as: CRTSA, CNDA, GDSA, CSSA, ISSAP, CSSP 2+ years’ Experience with multi-cloud environments including Azure, GCP, Atlassian Cloud, VMWare software-defined-datacenter (additional cloud solutions a plus) 3+ years’ of experience in cybersecurity Preferred: Experience with designing and implementing enterprise scale CSPM, CWWP, CASB and native cloud security solutions Preferred: Hands-on designing security architecture experience within Azure, GCP, and/or AWS network architecture, services and identity access management ) Preferred: Experience in integrating automated security controls via instrumentation within CI/CD pipelines and experience with Jenkins, Git, Ansible, Hashicorp, Chef, Puppet Job Type: Contract Pay: $100.00 - $125.00 per hour Schedule: 8 hour shift Work Location: Remote