Position Overview
Barbaricum is seeking a Cloud Security Engineer to support the modernization and security of USSOUTHCOM’s Enhanced Domain Awareness ecosystem. The successful candidate will design, implement, and maintain cloud security controls and monitoring capabilities across Azure and AWS environments while ensuring compliance with NIST 800-53 Rev. 5, FedRAMP, and Department of Defense Impact Level (IL) security requirements.
This position requires a strong understanding of cloud-native security architectures, identity and access management, vulnerability management, and continuous monitoring within mission-critical environments.
Responsibilities
- Implement and maintain cloud security controls within AWS and Microsoft Azure environments.
- Ensure compliance with NIST 800-53 Rev. 5, FedRAMP, and DoD IL 2, IL 4, and IL 5 security requirements.
- Design and administer Identity and Access Management (IAM) solutions and privileged access controls.
- Support implementation of Zero Trust security architectures and security automation initiatives.
- Conduct vulnerability assessments, risk analyses, and remediation activities across cloud platforms.
- Configure and manage cloud-native security monitoring and logging capabilities.
- Integrate security controls into DevSecOps and CI/CD workflows.
- Support accreditation, audit preparation, and cybersecurity compliance reporting activities.
- Collaborate with system engineers, developers, and data architects to ensure secure solution design.
- Provide technical recommendations to improve the overall security posture of the EDA environment.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or related field (or five years of equivalent professional experience).
- Demonstrated experience implementing cloud security frameworks and controls.
- Experience configuring and administering IAM solutions in AWS and/or Azure environments.
- Experience conducting vulnerability assessments and security compliance reviews.
- Experience with Security Information and Event Management (SIEM) platforms.
- Experience implementing or supporting Zero Trust architectures.
- Experience with cloud security monitoring, incident detection, and response activities.
- Ability to obtain and maintain a Secret security clearance.