Cloud Security Engineer

Description

Join our innovative Medical Telehealth Support Contract team, where you'll play a vital role in delivering cutting-edge remote healthcare services to Military Health System beneficiaries. As part of this dynamic program, you'll collaborate with top professionals to enhance patient care through advanced telehealth technologies and streamlined processes. We're looking for passionate individuals who are ready to make a real impact, ensuring patients receive the best care no matter where they are. With a focus on excellence, security, and innovation, this is your chance to be at the forefront of healthcare's digital transformation. If you're driven by quality and a commitment to patient safety, this opportunity is your next career move.

The Cloud Security Engineer will design, implement, and maintain security solutions in an AWS GovCloud environment integrated with Salesforce and IVR capabilities. The ideal candidate will have expertise in securing cloud-based infrastructures, including AWS services such as IAM, AWS Shield, CloudTrail, and VPC configurations, while ensuring compliance with government regulations such as FedRAMP, FISMA, and NIST 800-53. This role requires hands-on experience with Salesforce security best practices, including Shield Encryption and Event Monitoring, as well as securing IVR systems like Amazon Connect. The Cloud Security Engineer will collaborate with cross-functional teams to identify vulnerabilities, implement hardened solutions, and maintain the security posture of mission-critical systems supporting 24x7 operations. Strong analytical skills, a proactive approach to risk management, and a commitment to delivering secure and scalable solutions are essential for success in this role.

Key Responsibilities:

• Oversee the security and compliance of an AWS GovCloud and Salesforce-based environment, ensuring system reliability and protection for mission-critical operations.
• Design, deploy, and manage scalable, secure, and cost-effective AWS cloud infrastructure solutions, with a focus on implementing robust security measures.
• Automate security configurations and changes to environments using tools such as Terraform, CloudFormation, and scripting languages (e.g., Bash, Python).
• Develop and maintain CI/CD pipelines (e.g., GitLab) to integrate security checks and ensure secure development, testing, and Production releases in a 24x7 environment.
• Collaborate with cross-functional teams to identify vulnerabilities, implement hardened solutions, and ensure compliance with government regulations such as FedRAMP, FISMA, and NIST 800-53.
• Participate in Agile sprint and release-level activities, providing security expertise during technical exchange meetings to support program objectives.
• Mentor team members on cloud security best practices, sharing knowledge and processes with Development, Product, and Test teams.
• Maintain secure integrations with external systems, including EHR APIs (FHIR), Identity and Authorization tools (e.g., Okta), and other third-party solutions.
• Work closely with the cybersecurity team to develop, deploy, and maintain authorized solutions that meet DoD Security Technical Implementation Guides (STIGs) requirements.
• Conduct system audits, monitor security logs, and troubleshoot issues to ensure system health and compliance across all environments.
• Reconfigure and manage software installations and license catalogs while maintaining secure configurations in Development, Test, and Production environments.
• Create and enforce consistent security structures and documentation utilized across the program.
• Stay updated on advancements in AWS security services and recommend improvements to enhance the security posture of existing systems.

Required Qualifications:

• Bachelors degree (or equivalent work experience) with 4+ years experience supporting environments in AWS and/or Salesforce.
• Experience with Salesforce based solutions.
• Experience with AWS cloud infrastructure.
• Experience with Networking (e.g. AWS VPC, DNS, CIDR/Routing).
• Experience implementing compliance with government regulations such as FedRAMP, FISMA, and NIST 800-53.
• Strong problem-solving skills and ability to work in a fast-paced environment. Strong analytical and critical thinking abilities.
• Ability to work independently and as part of a team.
• Proficient in navigating electronic systems, computer programs, and virtual service platforms.

Requires a separate, quiet, private, confidential space to work from as well as having access to your own reliable high-speed internet hard wired to your home or apartment (coax or fiber from the Internet Service Provider (ISP) to your home. Using a hot spot from a mobile device (tethering) or high latency ISP is not acceptable. Must be an U.S. citizen, speak fluent English, and able to maintain and retain suitability investigation and clearance as required.

Preferred Qualifications:

• Experience with Salesforce security practices.
• Experience with AWS GovCloud
• Experience with IVR solutions like Amazon Connect (IVR) and other common AWS services (VPC, S3, EC2, IAM, Cloudwatch, Cloudformation) is a plus.
• Experience with securing real time audio/video streams (WebRTC, SRTP).
• Experience supporting and building AWS environments using infrastructure as code (IaC) tools such as Terraform, AWS CloudFormation.
• Proficiency in a scripting language and/or a structured programming language.
• Experience with security concepts like TLS, PKI, x509, along with tools like ACAS, OWASP, SonarQube.
• Experience with security controls and auditing.
• Experience supporting pipeline driven deployments leveraging CI/CD pipeline (e.g. Gitlab, Jenkins) along with version control systems (e.g., Git)
• Experience with Agile techniques (Scrum, Kanban) and Atlassian tools like Jira and Confluence.
• Veteran/military retiree and/or military spouse or Experience working with and/or for military communities.
• Experience in or supporting a Contact Center, Military/Veteran services, or healthcare environment.

Come break things (in a good way). Then build them smarter.

We're the tech company everyone calls when things get weird. We don't wear capes (they're a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for "how it's always been done."

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

#Remote