• Provide systems maintenance and administration services for CACTUS applications, infrastructure, and environments.
• Provide Help Desk support for application end-users; create and configure user accounts
• Develop and refine technical and end-user documentation as needed.
• Determine customer business requirements and applicable regulations, security policies, and standards that provide the foundation for design.
• Engineer and design solutions on clouds such as MS Azure, Amazon Web Services (AWS), Google Apps, and ServiceNow that manage risk and meet relevant security regulations, controls, and policies.
• Determine how to leverage services from cloud providers and identify gaps that must be met through other tools, software, or 3rd party services.
• Implement tools/services ranging from OS hardening, ACL/NACL flow control, web application firewalls, SIEM (e.g., Splunk), intrusion detection, and vulnerability management.
• Implement the architecture design: installing, configuring, and testing cloud services and associated 3rd party services and software.
• Participate in the assessment of system security controls to validate control implementation and identify weaknesses.
• Use tools such as discovery, vulnerability assessment, and policy audit tools to evaluate systems for vulnerabilities. Review results and implement fixes or risk mitigation.
• Identify new and innovative ways to use existing toolsets to automate security management, monitoring, and related processes to reduce risk and costs.
• Other related duties (migration of application to other environments, participation in daily stand-ups, etc.) as assigned.

Qualifications:

• U.S. Citizenship.
• A minimum of twenty (20) years of related experience
• Demonstrated knowledge and experience using Microsoft Office Suite.
• Knowledge of and skill in correct usage of English grammar, spelling, punctuation, capitalization, and style. Demonstrated experience in the use of the telephone and voicemail.
• At least 8 (eight) years of professional experience in IT/network engineering, security engineering, system administration, or security operations.
• Active DOD/DSS Secret security clearance or higher
• At least one of the following certifications: CISSP, CSSP, CCSK, GIAC, CEH
• Strong analytical skills with solid verbal and written communication skills
• Shows initiative, presents ideas to overcome challenges, self-starter
• Positive attitude, willingness to learn and apply, team player