AWS Security Engineer

Contenido del rol extraído en secciones para revisar más rápido.

Harden AWS environments and remediate STIG findings in accordance with NIST SP 800-53 and DHS 4300A requirements.
Maintain and improve the golden image pipeline to ensure compliant baselines

Serve as an escalation point from Tier 2 support for complex incidents and outages within the AWS GovCloud environment
Investigate and resolve issues across various AWS services EC2, RDS, S3, VPC, Lambda, and IAM
Perform root cause analysis to address underlying infrastructure issues and provide solutions to prevent recurrence.
Manage and resolve high-priority incidents, ensuring timely communication with stakeholders and affected tenants

Continuously monitor tenant environments using CloudWatch, CloudTrail, and other tools (Dynatrace, Splunk) to detect performance issues, security incidents, and infrastructure bottlenecks
Utilize Dynatrace, Splunk, or other proactive monitoring tools to mitigate potential issues before they escalate
Analyze system performance and recommend optimizations to improve stability, efficiency, and security

Manage and maintain the AWS infrastructure, including EC2 instances, S3 buckets, VPC configurations, RDS databases, and other services
Ensure that all tenants’ s AWS resources are secure, FedRAMP compliant, and optimized for performance
Collaborate with the Architecture team to implement solutions that align with best practices for AWS cloud infrastructure
Adhere to Change Management procedures

Collaborate with other team engineers to resolve development issues/incidents and implement improvements
Document solution designs, process procedures, and lessons learned to enhance team knowledge
Provide technical mentorship and knowledge sharing to more junior engineers less familiar with pipeline and infrastructure automation

Bachelor’s degree and 5 years of experience, an Associates degree and 7 years of experience, or a High School diploma or equivalent and 9 years of experience.
U.S. Citizenship required
Must have ability to obtain a DHS Public Trust Security Clearance, and/or EOD clearance
5+ years of experience in cloud services and infrastructure
3+ years of extensive hands-on experience with automation involving a wide range of AWS services including but not limited to EC2 instances, S3 buckets, VPC configurations, RDS databases, and other services
Proven experience in systems engineering, design, and integration and system administration in Linux or RHEL environments.
Strong understanding of system life-cycle processes including requirements development, design, implementation, testing, and sustainment.
Hands-on experience working with cloud platforms (AWS, Azure, or similar).
Hands-on experience with system verification, validation, and compliance documentation.
Familiarity with tools and methodologies supporting systems architecture and model-based systems engineering (MBSE).
Strong analytical, problem-solving, and communication skills.
Ability to work effectively in cross-functional teams and manage competing priorities in a fast-paced environment.

Preferred certifications: AWS Cloud PractitionerAWS Certified SysOps Developer, AssociateAWS Certified Developer, AssociateAWS Certified DevOps Engineer, ProfessionalRelevant Agile CertificationsRed Hat Ansible
AWS Cloud Practitioner
AWS Certified SysOps Developer, Associate
AWS Certified Developer, Associate
AWS Certified DevOps Engineer, Professional
Relevant Agile Certifications
Red Hat Ansible
Experience supporting government or defense contracts.
Extensive knowledge and understanding of AWS GovCloud and deploying in government environments
Experience with incident management, root cause analysis, and resolving high-priority incidents in large, multi-tenant environments
Exemplary communication analytical, and technical knowledge across the client environment
Knowledge of ITIL frameworks or systems engineering certifications (INCOSE, CSEP, or equivalent).
Familiarity with cloud-based or hybrid systems integration.
Experience in Agile or DevSecOps environments.
Experience with PowerShell, AWS CLI, or other automation scripts to troubleshoot and resolve issues