Tems Tools Jobs in Virginia (NOW HIRING)

Job Summary:
Freedom Technology Solutions Group is looking for a Cloud Engineer to accelerate mission delivery and connect mission partners with the power of commercially-driven cloud computing. The role involves managing security assessment, compliance, change management, and continuous monitoring responsibilities across multiple cloud service providers.
Responsibilities:
• Assess cloud security technologies for security gaps and weaknesses according to industry standards.
• Review cloud security body of evidence packages for completeness and accuracy.
• Facilitate TEMs with cloud service providers to review cloud service architectures.
• Provide project management support including project planning, task tracking, milestone management, and resource coordination.
• Manage security assessment, security compliance, change management, and continuous monitoring activities, including associated program management functions, across four (4) CSPs: AWS, Google Cloud, Oracle Cloud, and Microsoft Azure.
• Assess cloud security technologies for security gaps and weaknesses according to industry standards.
• Analyze security scan findings and perform risk analysis on the findings.
• Review cloud security body of evidence packages for completeness and accuracy.
• Collaborate with other internal components and security peers to determine security and potential weaknesses of cloud infrastructure and cloud services.
• Advise Sponsor leadership on cloud security services.
• Analyze system alerts to determine if a security weakness exists and document risk mitigation procedures.
• Sustain and evolve the Sponsor's standard operating procedures to meet Program Objectives.
• Facilitate technical exchange meetings (TEMs) with cloud service providers to review cloud service architectures.
• Provide program management support including project planning, task tracking, milestone management, and resource coordination.
• Develop and maintain program metrics and performance indicators including security assessment completion rates, finding remediation timelines, compliance status dashboards, and other KPIs as directed by the Sponsor.
• Respond to Sponsor inquiries and requests for information within established timelines, providing accurate and complete technical and programmatic information.
• Prepare periodic program highlights, status reports, and briefing materials for Sponsor leadership.
• Support ad hoc taskings from the Sponsor including research, analysis, documentation, and coordination activities.
• Maintain regular communications with the Sponsor through scheduled status meetings, written reports, and other communication channels.
Qualifications:
Required:
• Facilitating TEMs with cloud service providers to review cloud service architectures
• Active Security Clearance with Polygraph.
• Maintaining A&A packages across multiple services/systems in accordance with FIPS-199, NIST 800-53, and CNSS 1253
• Designing, implementing, assessing or reviewing systems utilizing cloud technology with AWS, Oracle Cloud, Google Cloud, or Microsoft Azure
• Utilizing or reviewing cross domain technology and common architecture designs
• Continuous monitoring requirements including scan analysis with tools such as Rapid 7, Nessus, and Qualys
• Creating, monitoring, or closing POA&Ms
• Utilizing compliance tools such as Xacta 360, Risk Vision, RSA Archer
• Common control provider concept within the NIST RMF
• Security control assessments including working with SCAs and preparing security packages
• Information system security engineering activities
• Project management including planning, task tracking, milestone management, and resource coordination
• Developing and maintaining program metrics, performance indicators, and compliance status dashboards
• Preparing technical reports, program highlights, status briefings, and leadership communications
Preferred:
• Using the Sponsor's or IC element A&A process
• Creating or reviewing A&A body of evidence documentation in a cloud security environment
• Identifying, implementing, or reviewing appropriate information security controls
• Working in Xacta 360
• Experience with Sponsor's A&A tools
Company:
FTSG was founded with the idea of building a company in which IT professionals have the 'Freedom' to be creative and innovative. Founded in 2004, the company is headquartered in Columbia, USA, with a team of 51-200 employees. The company is currently Growth Stage.