Senior Cloud Security Engineer

You will be working on a team that is developing a suite of web/cloud-based software tools--ranging from web applications to back-end systems--that support national security mission applications.

You will work with a multi-disciplinary collaborative team of cloud engineers, software engineers and security specialists to design and implement multiple secure cloud-based software development and production environments.

You will be part of our employee-owned international research and engineering company.

ARA is recognized for providing technically superior solutions to complex and challenging problems in the physical sciences, and you will be on this team.

This is a hybrid position with expectation of 3 days in-office based in Raleigh, NC.

Due to the work you’ll perform and interactions with intelligence community and DoD programs you must be a US citizen and need an active US Security Clearance at the Secret level or higher.


* Perform oversight of the development, implementation and evaluation of information system security program policy.


* Lead the Authority To Operate (ATO) Risk Management Framework (RMF) process for multiple systems both unclassified and classified.


* Manage onboarding/offboarding of users to the cloud environment (DD2875).


* Lead Incident Response team acting on system audit alerts in timely manner.


* Perform recurring review of required audit and scanning tool results.


* Lead the patch management of cloud assets.


* Develop and maintain Risk Management Framework (RMF) System Security Plan (SSP) and additional Body of Evidence (BoE) documents.


* Understanding of Cloud Security Best practices and ability to demonstrate capabilities during Assessment.


* Ability to track and update annual requirements to remain compliant with existing Risk Management Framework (RMF) Body of Evidence (BoE).


* You will be working closely with a collaborative team so your team player personality and excellent written/oral communication skills will be essential.

Senior Security Engineer Required Experience & Skills:


* BS in Cyber Security/Information Technology or a related field with 8-10 years of relevant experience, or Masters with 6-8 years of relevant experience.


* DoD 8570 IAT Level 2 Certified.


* DoD 8570 IAM Level 2 Certified.


* 3+ years experience with eMASS (or similar GRC tool) for developing and maintaining RMF SSP and Body of Evidence (BoE) documents.


* 2+ years experience with ESS and ACAS and capable of operating these applications within a deployed environment.


* U.S.

Citizenship with an active Security Clearance.

Preferred Experience & Skills as a Senior Security Engineer:

Above all, we value passion, a desire to learn, and teamwork.

We are confident that if you possess the right attitude, work ethic, and skill set that you could succeed in the role.

In addition to the experience and skills above, if you have any of the following you will be able...