Cloud Security Engineer

Cloud Security Tech Support

LS Technologies, A Tetra Tech is seeking a highly skilled Technology Specialist to serve as a Cloud Security Tech Support. The candidate will support FAA development tenants with the integration, deployment, monitoring, and maintenance of cloud environments, ensuring operational efficiency, system reliability, and compliance with FAA standards. This role will focus on securing and supporting FAA cloud environments while also ensuring proper network security, firewall configuration, and perimeter defense. The specialist will work closely with engineering, operations, and cybersecurity teams to maintain secure, compliant, and highly available IT systems.

Job Duties & Responsibilities

• Apply senior-level engineering knowledge to analyze and solve engineering, scientific, or management problems.
• Serve as the lead Cloud Security Architect, designing and implementing secure architectures for multi-cloud and hybrid environments supporting FAA systems.
• Define and document cloud security reference architectures, patterns, and standards consistent with NIST, FedRAMP, DHS CDM, and FAA-specific security requirements.
• Develop, track, and manage Plans of Action and Milestones (POA&Ms) to ensure timely remediation of security findings.
• Perform and support of IRAT (Information Risk Assessment Tool) testing, validation, and reporting for FAA systems.
• Prepare, review, and maintain security documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), and continuous monitoring deliverables.
• Conduct system engineering analyses to identify risks, vulnerabilities, and mitigation strategies for cloud-based solutions.
• Support the development of security controls, continuous monitoring strategies, and compliance documentation for FAA cloud systems.
• Collaborate with cross-functional engineering, cybersecurity, and operations teams to ensure seamless integration of security into all phases of the system lifecycle.
• Lead technical reviews, risk assessments, and trade-off analyses to inform FAA cloud adoption and modernization initiatives.
• Provide subject matter expertise on Identity and Access Management (IAM), Zero Trust Architecture, data encryption, container security, and secure DevSecOps practices.
• Mentor and guide junior engineers, ensuring knowledge transfer and capability development within FAA technical teams.
• Interface with FAA leadership and external stakeholders to present cloud security strategies, risks, and mitigation plans.

Qualifications:

• 10+ years of progressive systems engineering experience, including at least 5 years focused on cloud security architecture and engineering.
• Strong knowledge of NIST risk management framework, FedRAMP, FISMA, Zero Trust, and federal cybersecurity standards.
• Demonstrated experience with AWS, Azure, or GCP cloud environments, including security design and compliance.
• Hands-on experience with POA&M management, IRAT Testing, and development of security documentation.
• Expertise with IAM, PKI, data protection, logging/monitoring, and cloud-native security services.
• Hands-on experience with DevSecOps, CI/CD pipelines, and container/orchestration security (Docker, Kubernetes, OpenShift).
• Familiarity with vulnerability management tools (e.g., Tenable, Qualys), SIEM solutions (e.g., Splunk, ELK), and endpoint/cloud security platforms.
• Strong analytical, communication, and documentation skills, with proven ability to interact with senior government stakeholders.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Software Engineering, or related field, or equivalent experience.

Work Requirements:

• Work location: Remote
• Work Hours: 40
• Travel: 20%
• Extended Computer Use: Regular and prolonged periods of working at a computer terminal.
• Lifting and Carrying: Occasional lifting of equipment and materials weighing up to 50 pounds may be required during installations.
• Dexterity: Manual dexterity and visual acuity to operate computer equipment, troubleshoot issues, and perform tasks requiring precision. Sitting/Standing: Both prolonged sitting and occasional standing may be required for troubleshooting and attending to system issues. Background check: Must have ability to obtain and maintain a Public Trust.