AWS Cloud Engineer Sr

The Leidos; Cybersecurity, Architecture, and Engineering (CAE) organization, within the Corporate Information Security Office and Digital Modernization sector, has an immediate opening for an experienced, and motivated Cybersecurity AWS Cloud Engineer Sr.

Location: This role can be supported remotely or from one of the following locations: Gaithersburg, MD, Reston, VA or Orlando, FL.

Citizenship: US Citizenship is required.

Come and champion your Cloud talent and passion at Leidos – Work at the forefront of cloud technology, helping clients “imagine and invent” their own future. Join Leidos to do the work you love in an inclusive, collaborative, ethical, and caring company, where you can be empowered to grow, learn and thrive in your career. Build your career with the best! In addition to delivering innovative solutions for Leidos clients, you will work with highly skilled Subject Matter Experts (SMEs), diverse network of people across Leidos businesses who are using the latest emerging technologies to address today's biggest business challenges.

In this role, you will lead with the development and implementation for AWS cloud security architectures for deployed into various cloud, on-prem, and hybrid systems. The position will directly contribute to the implementation of global security cloud architecture. Your primary responsibilities include design validation, compliance, and communicating architectures that adhere to regulatory requirements and Leidos best practices.  There are a lot of opportunities for creativity and innovation as you work with industry leading, enterprise grade security products, to develop solutions.

Primary Responsibilities

• Work with Leidos Corporate customers to understand their needs and design appropriate environment controls to provide solutions that adhere to security standards. 

• Provide expertise regarding AWS, Azure AD, APIs, and security best practices.

• Provide technical governance and regulatory compliance validation for Leidos environments.

• Assess systems architectures currently in place and work with technical staff to recommend cybersecurity controls to improve it.

• Resolve technical security design issues as commercial enterprise solutions and business needs evolve.

• Continually research current and emerging security technologies and propose changes where needed.

• Work closely with fellow Cybersecurity Architects and Engineers on our team with different areas of expertise (Networking, Endpoint, Application, Cloud, Mobile, etc.). 

• Develop a set of reference architectures over time that can be used across customer engagements.

• Adapt these models to keep up to date with regulator standards (e.g., NIST 800-171, CMMC, Privacy, among others).

• Lead design validation, compliance, and communicating architectures that adhere to regulatory requirements and Leidos best practices.

• Responsibilities may include other cloud platforms and SaaS integration.

• Implement core and cloud infrastructure security to manage risks and exposure.

• Support clients with data protection, IoT, and overarching cloud capabilities.

• Perform cyber reconnaissance to illuminate a potential attack surface area.

• Provide threat and vulnerability management to federal clients and teams.

• Analyze tactical network architectures and topologies to assess security risks.

• The position will directly contribute to the implementation of global security cloud architecture.

• Thoroughly document implementations, via technical documentation and run books for the client.

• Provide input and feedback on security architectures.

• Customer facing role – Walk thru to whiteboarding of architecture and implementation planning to stakeholders.

Basic Qualifications

• Bachelor's degree and 8-12 years of experience in Information Technology with a real passion for the Cybersecurity field.  Additional years of relevant experience, training, and/or professional certifications will qualify in lieu of a degree.

• US Citizenship.

• Able to obtain a Security Clearance.  Note: Individuals do not need to possess any clearance today.

• Demonstrated experience developing and deploying security solutions that meet customer requirements.

• Excellent written and verbal communication skills and the ability to partner and collaborate with both engineers and customers on architecture vision and security model.

• Implement security architectures for cloud cloud/hybrid systems.

• Possess a firm understanding of the offerings and capabilities within Amazon Web Services (AWS).

• Represent Security Platform in the development and implementation of the overall global cloud enterprise architecture.

• Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM), network security) within SaaS, IaaS, PaaS, and other cloud environments.

• Experience with enterprise architecture and working as part of a cross-functional team to implement solutions.

• Amazon web services experience especially VPC Networking, IAM, KMS, CloudFormation, EC2, API Gateway, Kubernetes, SQS, SNS, Kinesis, RDS, DynamoDB, and Lambdas or equivalent preferred.

• Resident cloud infrastructure subject matter expert researching, implementing and communicating infrastructure-as-code solutions across the Enterprise.

• Ability to utilize a variety of tools like Stash, Git, Nexus, Jenkins, Gradle, Groovy, YML, and AWS security capabilities (WAF, GuardDuty, Security Groups, IAM, etc.)

• Proficiency in scripting programming languages – (i.e., Python, JSON, Ruby, C#, PowerShell, YAML)

• Experience with Agile Practices like Scrum, Kanban, CI/CD preferred.

• Experience with deployment orchestration, automation, and security configuration management (i.e., Jenkins, Puppet, Chef, CloudFormation, Terraform, Ansible).

• Experience with enterprise applications (architecture, development, support, and troubleshooting).

• Effectively applies knowledge and skills of software development and testing to solve a range of problems.

• Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc.).

• Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies.

• Experience and exposure to threat modeling and design reviews to assess security implications and requirements for the introduction of new technologies.

• A self-starter who can execute at the senior engineering level using a combination of learned skills, personal networking, and grit to achieve objectives.

• Experience with industry standard virtualized networking components (Cloud application firewalls, Cloud Services Routers, Cloud Gateways, etc.).

• Demonstrate poise and creativity while working with other architects in different domain spaces to come to a common solution.

• Knowledge of a broad spectrum of security products and ability to conduct analysis of alternatives to onboard new enterprise capabilities.

Preferred Qualifications

• Experience and comfort in taking strategic intents and driving technical organizational change.

• 5-8 years' experience with AWS

• Experience authoring enterprise cloud security policies or establishing an enterprise cloud security strategy.

• AWS Certifications

• Experience implementing multi-factor authentication for SaaS applications.

• Experience architecting solutions within Amazon Web Services (AWS).

• Experience as a Solution Architect designing, reviewing, and securing environments. 

• Information security experience such as a DoD and/or Intelligence Community employee or contractor would be a bonus.

• Knowledge and experience in DFARS; NIST 800-53

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.