Cloud Computing Specialist (CCS) SME

Cloud Computing Specialist (CCS) SME

Location: 100% remote

Subject matter expert with regards to Certification and Accreditation (C&A) and a broad coverage of the application of the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) standards and guidance as outlined in the NIST Special Publication(s) (SP) 800-53 and 800-37 (Current versions). Maintains current certification as a Certified Cloud Security Professional. Works independently with substantial cloud computing security knowledge. Identifies, manages, and resolves cloud computing security risk and implements best practices as applied within a cloud environment (across all the different deployment and service models, and derivatives). Provides cloud computing expertise to analyze and design cloud hosting requirements in multiple cloud platforms, including Azure, Google, OCI and AWS. Collaborates with technicians and vendors on hosting activities and troubleshoot deployment related issues. Provides subject matter expertise on cloud computing, native services, enterprise cloud offerings (e.g., boundary cloud access point CAP), Secure Cloud Computing Architecture (SCCA)) and security architecture that must meet DoD policies, directives, and guidelines. Possess Cloud Security Requirements Guide knowledge to employ cloud security controls including but not limited to network security, tenant isolation, encryptions, key management, vulnerability assessments, application firewalls, and Zero Trust (ZT) considerations. Recommends cloud hosting solutions and innovations to streamline business processes. Develops deployment specifications/guides to include configurations, test plans, results, and relevant cloud hosting documentation to support EH s operations.

Minimum Requirements:

• Five (5) years of relevant C&A experience
• Risk Management Framework (RMF) and NIST C&A, Zero Trust, SCCA FRD and SRG experience
• DOD Cybersecurity experience
• Experience in assessing Cybersecurity Controls and conducting C&A reviews for large, complex Information systems.
• Experience with modern and dynamic computing (e.g., hybrid computing, edge computing, cloud native microservices) and networking protocols or standard Internet of Things (IoT) protocols.
• 5+ years of experience in cloud computing, with a proven track record of designing and managing complex cloud environments is required. Must have experience in deployment and migration of various workloads to cloud environments.

Experience and well versed in FedRAMP assessment methodology of security and privacy controls deployed in cloud information systems to include six (6) domain areas which include:

• Architectural Concepts & Design Requirements, Cloud Data Security, Cloud Platform & Infrastructure Security, Cloud Application Security, Operations, Legal & Compliance.
• Expert in cloud technologies, native services, and automation with emphasis in Azure, Google, OCI, and AWS.
• Must have strong business and technical writing skills.
• Certification as a Certified Cloud Security Professional
• Must possess IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) at time of proposal submission.
• DoD Approved 8570 Baseline Certification at time of submission: Category IAT Level II

At least one industry Cloud certification Requires (s):

AWS Solutions Architect, Azure Solutions Architect Expert, Oracle Cloud Infrastructure Architect Foundations, Oracle Cloud Infrastructure Security Professional, Google Cloud Platform Cloud Architect

• Comptia Security+ certified (Good to have)
• DoD clearance (Good to have)