Cloud Operations Architect - (On Site)

This position can be filled at Schriever SFB, Colorado Springs, CO, Redstone Arsenal, Huntsville, AL, or in the National Capital Region

Active Secret clearance is required for consideration.

Aegis Aerospace has more than 30 years of experience in creating innovative and practical solutions to fulfill defense and space needs.

We are looking for candidates who are ready to revolutionize the space and defense industry and pioneer new technological advancements to safeguard our country.

Are you ready to Innovate, Explore, and Protect?

Salary range: $137,00 - $147,000

• Lead the design and development of the Azure and AWS security architectures for protecting PHI/PII/PCI data deployed into different types of cloud and cloud/hybrid systems.
• Directly contribute to the overall enterprise cloud architecture and lead the security vision and strategy around cloud based applications, across all types (including Infrastructure, Platform, and Software as a Service (IaaS/PaaS/SaaS).
• Serve as the central point of contact for Enterprise Security for other Technology teams within the organization for all matters related to cloud security reporting.
• Act as the ambassador and senior technical representative for Enterprise Security while engaging with other senior technical leaders throughout organization in design and implementation of cloud and cloud/hybrid based implementations and solutions.
• Work with Engineering, Infrastructure Services, and Application Development organizations to choose appropriate technology solutions and facilitates complete integration into the company environments.
• Develop standards in partnership with Engineering, Infrastructure Services, and Application Development.
• Design and develop security architectures for cloud and cloud/hybrid based systems.
• Design and implement, based on business requirements, cloud-native architectures and designs that will allow those requirements to be met with a minimal degree of risk to the organization and with appropriate security controls present.
• Lead initiatives designed to share knowledge across Security Platforms and/or Technology teams. Identifies, recommends, coordinates, deliver timely knowledge to support teams regarding technologies, processes or tools.
• Develop and execute strategies to increase Cloud Security knowledge throughout the enterprise.
• Provide standardized offerings to facilitate the successful secure access to stacks and the overall cloud environment.
• Perform Threat and Vulnerability Detection & Remediation.
• Provide management of Security Groups and ACLs, Perimeter security with WAF and Shield DDoS.
• Conduct assessment for Data-in-Transit / Certificate Management, Data-at-Rest / Key/Secret Management.
• Perform testing and scanning of cloud products and application customers to ensure compliance with overall security standards.
• Operate and support cloud team products and legacy applications not operating in a full-stack operating model.
• Create continuous security communities of practices.

Basic Requirements:

• Must have one of the following combinations of education and experience: HS Diploma (or GED) and 14 years of general experience; Associate’s degree and 12 years of general experience; Bachelor’s degree and 10 years of general experience; Master’s degree and 8 years of general experience
• Must have 8 years of directly related experience in developing security architecture or performing as a cloud engineer, or equivalent roles.
• Must have 3 years of experience in management or leadership roles.
• Must have a commercially recognized IT Architecture certification.
• Must have, or obtain within 6 months of hire, a current DoD IAT Level III certification.
• Must have, or obtain within 6 months of hire, a current DoD IAM Level III certification.
• Must have an active DoD Secret Security Clearance.
• Must have, or obtain, an active DoD Top Secret Security Clearance.

• Have a degree in information technology or related fields (computer science; information science; software engineering), or in Engineering with additional IT qualifications.
• Have experience engineering, managing, and supporting cloud security products.
• Have knowledge of hands-on technical coaching to accelerate cloud security learning across the organization.
• Have experience with continuous security practices, including: threat modeling, threat and vulnerability management, secure coding practices, and automated penetration testing.
• Have experience with network/perimeter security platforms.
• Have experience with encryption in-flight and at-rest practices, as well as certificate and secrets management, security event & incident management (SEIM).
• Have experience with infrastructure automation, infrastructure as code, automated application deployment, monitoring/telemetry, logging, reporting/dash-boarding, and continuous delivery technologies.
• Have experience with orchestration template technologies.
• Have experience with programming and scripting languages: Ruby, Go, Python, Perl, bash, ksh.