Cloud Security Expert

Summary

All Native Group, a division of Ho Chunk Incorporated, is seeking a Cloud Security Expert to support a Federal Agency enterprise data management program. This role secures and hardens the program's cloud infrastructure, with a focus on the configuration management and security of a high-availability AWS OpenSearch cluster and the large-scale data stores it supports. This position supports an active federal contract. Any offer of employment is contingent upon Government approval of the candidate and successful completion of the DEA security clearance process.

Essential Functions

• Provide configuration management and security for a cloud high-availability OpenSearch cluster of 10 or more nodes.
• Implement and maintain security controls across cloud infrastructure supporting enterprise search and data stores.
• Monitor, assess, and remediate security vulnerabilities in the cloud environment.
• Support compliance with federal security requirements and the applicable system security posture.
• Collaborate with application and data engineering teams to embed security throughout the delivery lifecycle.
• Document security configurations, procedures, and incident response actions.
• Support safeguarding of all government equipment, information, and property in accordance with Established Rules of Behavior.
• Support Vulnerability Assessment and Penetration Testing (VAPT), including quarterly testing for scheduled applications.
• Remediate high-severity vulnerabilities within 30 days and medium-severity within 90 days.
• Support DEA's DevSecOps and CI/CD pipeline implementation.
• Implement and test backup and disaster recovery plans for cloud resources.
• Coordinate with DEA TC Information Security, Cloud Services, Engineering, and Operations.

Competencies

• 5+ years of experience in cloud security, cloud infrastructure, or information security engineering.
• Experience with configuration management and security of AWS environments; OpenSearch or ElasticSearch cluster experience strongly preferred.
• Experience securing high-availability, multi-node cloud clusters.
• Working knowledge of FISMA, NIST SP 800-53, NIST SP 800-37 (RMF), FedRAMP, and FIPS 140-3, 199, and 200.
• Experience working in an Agile delivery environment.
• Active security certification required, such as CISSP, CCSP, or AWS Certified Security Specialty.
• Experience supporting federal law enforcement or mission-critical cloud environments.

Supervisory Responsibility

None for this position

Physical Demands 

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

• Must be able to remain in a stationary position 75% of the time.
• Occasionally moves about inside the office to access file cabinets, office machinery, etc.
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer.
• Expresses or exchanges ideas by means of the spoken word.  Those activities in which they must convey detailed or important spoken instructions to other workers accurately, loudly or quickly.
• Frequently moves standard office equipment up to 25 pounds.
• Must be able to work indoor conditions 90% of the time.

While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand; walk; use hands to finger, handle or feel; and reach with hands and arms.

Position Type/Expected Hours of Work

Work is conducted at DEA facilities in Arlington, VA and Merrifield, VA. This is a full-time position with flexible hours based on mission requirements. 

Travel

Occasional CONUS travel may be required for meetings, conferences, or training.

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field. Experience can be considered in lieu of education.

Compensation and Benefits:

The expected compensation range for this position is $130,000.00 - $152,500.00 per year (annualized hourly rate of pay). We offer comprehensive benefits that allow you to balance work and life. A benefits summary is available from this link: https://jobs.allnativegroup.com/categories/1/benefits/1/employee-benefits

Drug Free Workplace

All Native Group is a Drug Free Workplace. It is our policy that all new hires must successfully complete a pre-employment drug screen as a condition of employment. In addition, all employees are subject to random drug screens throughout the term of their employment with All Native Group.

Security Clearance

Active secret clearance is required

AAP/EEO Statement  

All Native Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. However, preference may be extended to persons of Indian descent in accordance with applicable laws.

About Ho-Chunk, Inc. & All Native Group

Ho-Chunk, Inc. is an award-winning economic development corporation of the Winnebago Tribe of Nebraska. Our mission is to provide long-term economic development for the Winnebago Tribe and job opportunities for Tribal members.

All Native Group is a network of small businesses that support the critical missions of various U.S. Government customers. Our capabilities include telecommunications, health, logistics, specialized training, professional services, and IT solutions. Since earning our first federal contract in 2004, we have continued to grow and diversify our services while maintaining a strong commitment to excellence. As a tribally owned organization, All Native Group operates multiple subsidiary businesses, providing clients with the advantages of working with a small business while leveraging the resources and expertise of a larger, established company. Our work is guided by our core NATIVE values:

• Native American Owned & Proud – Serving the Winnebago Tribe of Nebraska.
• Accountable – To always do what’s right.
• Team-Focused – For inclusive progress.
• Innovative – In creating solutions.
• Visionary – In our purpose and direction.
• Excellence – Through learning and performance.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.