Responsibilities
- Ensure the integrity, security, and regulatory compliance of cloud environments built on AWS GovCloud and Salesforce platforms to support critical mission functions.
- Architect, implement, and manage secure, scalable, and cost-efficient cloud infrastructure on AWS with an emphasis on proactive security controls.
- Automate configuration management and security enforcement across environments using infrastructure-as-code tools like Terraform and CloudFormation, along with scripting in Bash or Python.
- Build and sustain CI/CD pipelines, such as those in GitLab, incorporating automated security validations for continuous integration and deployment in always-on systems.
- Partner with multidisciplinary teams to detect security weaknesses, apply hardened configurations, and adhere to federal standards including FedRAMP, FISMA, and NIST 800-53.
- Engage in Agile development cycles, contributing security insights during technical planning and review sessions to align with project goals.
- Guide team members in cloud security principles and share best practices with Development, Product, and Testing units.
- Securely integrate third-party systems such as electronic health record APIs (FHIR), identity providers (e.g., Okta), and external authorization services.
- Collaborate with cybersecurity personnel to implement and sustain solutions compliant with Department of Defense STIG requirements.
- Perform regular system audits, analyze security event logs, and resolve incidents to maintain operational health and compliance across all deployment stages.
- Manage software deployment and licensing configurations while enforcing security baselines across Development, Testing, and Production environments.
- Establish and enforce standardized security frameworks and documentation used consistently across the program.
- Monitor emerging trends in AWS security technologies and propose enhancements to strengthen the organization’s security posture.
Work Arrangement
Hybrid
Other
- Applicant must be a U.S. citizen.
- Fluent English proficiency is required.
- Must be able to obtain and retain a suitability clearance as mandated.
- A private, quiet, and secure workspace at home is necessary.
- Reliable high-speed internet connection with hardwired coax or fiber is required; mobile hotspots or high-latency providers are not permitted.
- Original job posting date: December 22, 2025.
- Expected closing date is no earlier than three days after the initial posting date.
