Northrop Grumman Defense Systems (NGDS) is seeking a Cloud Security Engineer to secure and enhance capabilities in support of DAF CLOUDworks at the Air Force Research Laboratory (AFRL) at Griffiss Air Force Base. DAF CLOUDworks is a rapidly growing secure cloud program that encompasses 10+ teams supporting information security, infrastructure development, and cloud migration. Along with operations and sustainment, DAF CLOUDworks focuses on securing and enhancing offerings to implement new requirements, enhance functionality, increase efficiency, and lower operating/deployment overhead. Successful candidates should have a track record as an effective communicator and problem solver who is able to develop and maintain good working relationships with internal and external stakeholders.
Basic Qualifications for a Cloud Security Engineer:
- One of the following:
- A high school diploma or equivalent with 6 years of relevant experience
- A bachelor’s degree with a minimum of 2 years of relevant experience
- A master’s degree with 0 years of experience
- An active Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility
- Able to obtain IAT Level II or IAT Level III certification per DoD 8140 requirements such as CompTIA SecurityX (formerly CASP+) or CompTIA Security+ within 60 days of start date
- Experience with Linux command line interface (CLI), including scripting in Bash, Python, PowerShell and automating tasks
- Technical knowledge of infrastructure components, including network, storage, Linux/Windows, and IT security concepts
- Working knowledge and/or familiarity with Cloud-based technologies (AWS Platform, Azure Platform, Google Cloud)
- Experience with NIST Risk Management Framework or other similar control framework
- Knowledge of vulnerability assessment tools including Nessus, Wireshark, Kali Linux, Nmap, Metasploit, and Lin/WinPEAS
- Experience with penetration testing, adversarial emulation, or red teaming
Basic Qualifications for a Principal Cloud Security Engineer:
- One of the following:
- A high school diploma or equivalent with 9 years of relevant experience
- A bachelor’s degree with a minimum of 5 years of relevant experience
- A master’s degree with 3 years of experience
- An active Top Secret clearance with Sensitive Compartmented Information (SCI) eligibility
- Able to obtain IAT Level II or IAT Level III certification per DoD 8140 requirements such as CompTIA SecurityX (formerly CASP+) or CompTIA Security+ within 60 days of start date
- Experience with Linux command line interface (CLI), including scripting in Bash, Python, PowerShell and automating tasks
- Technical knowledge of infrastructure components, including network, storage, Linux/Windows, and IT security concepts
- Working knowledge and/or familiarity with Cloud-based technologies (AWS Platform, Azure Platform, Google Cloud)
- Experience with NIST Risk Management Framework or other similar control framework
- Knowledge of vulnerability assessment tools including Nessus, Wireshark, Kali Linux, Nmap, Metasploit, and Lin/WinPEAS
- Experience with penetration testing, adversarial emulation, or red teaming
Preferred Qualifications:
- CompTIA SecurityX or CompTIA Security+ certification or IAT Level II equivalent per DoD 8570.01
- CompTIA Pentest+
- Fundamental cloud certifications such as:
- AWS Platform (Cloud Practitioner or higher certification)
- Azure Platform (Azure Fundamentals or higher certification)
- Experience with VMware Tanzu Kubernetes Grid (TKG), Rancher, or similar DevOps architectures
- Knowledgeable of vulnerabilities found in CI/CD Pipelines
- Expertise leveraging git for code management (ArgoCD, Flux, Gitlab)
- Experience with administering cloud-based networking (ACL, Security Groups, WAF)
- Demonstrated experience in cloud adoption, environment prototyping, and data migration
- Knowledge of account management solutions (RBAC, AWS IAM, Azure AD)
#DAFCloudSalary Range: $81,300.00 – $121,900.00Salary Range 2: $100,300.00 – $150,500.00
