Cloud Security SME

At Credence, we support our clients' mission-critical needs, powered by technology. We provide cutting-edge solutions, including AI/ML, secure cloud, digital transformation, and advanced intelligence capabilities, to the largest defense, health, and international development federal organizations. Through partnership and trust, we increase mission success for warfighters and secure our nation for a better future. We are privately held, are repeatedly recognized as a top place to work, and have been on the Inc. 5000 Fastest Growing Private Companies list for the last 12 years. We practice servant leadership and believe that by focusing on the success of our clients, team members, and partners, we all achieve greater success.

We are actively seeking a Cloud Security SME to join a 10-15 person team supporting Department of Health and Human Services.

The purpose of the HHS Zero Trust Program Management Office (ZT PMO) effort is to assist in the implementation of the HHS Zero Trust Architecture. This initiative is crucial for enhancing the cybersecurity posture of HHS by transitioning to a "zero trust" security model, which mandates continuous verification of each user, device, application, and transaction.

This position will be located at Credence corporate headquarters in McLean, VA with requirement to support regular, periodic meetings at HHS offices in the Washington, DC metropolitan area and primarily in Rockville, MD.

The Cloud Security SME will be responsible for provisioning, managing, and maintaining servers in multiple Cloud environments (at minimum AWS and Azure), ensuring they are secure, efficient, and compliant with HHS security standards.
• Assist in determining whether systems meet security, compliance, and performance requirements.
• Follow Agile and DevSecOps best practices
• Identify and evaluate HHS ZT capabilities and identify gaps
• Gather, document, and confirm requirements
• Define ZT Roadmap and Implementation Plan
• Provide leadership in configuring and adopting Zero Trust Cloud Configurations
• Research, propose, test, implement, and deploy new technologies and methodologies to improve HHS ZT architecture and ZT maturity
• Implement, maintain, and improve zero scorecard processes and automation
• Implement test and data environment in both MS Azure and AWS Cloud environments.
• Perform hands-on proof-of-concept, proof-of-principal, pilot, and prototypes of new technologies or methodologies.
• Integrate new technologies or methodologies into existing security technologies applicable towards ZT, Public Key Infrastructure/Public Key Encryption (PKI/PKE), Identity and Credential Access Management (ICAM), and Identity and Access Management (IdAM)
• Design, develop, test, and implement code
• Configure and customize applications and COTS such as PowerBi
• Provide SDI support
• Develop A&A package and support ATO processes.
• Assist in defining automated test suites for instrumentation into CI/CD pipelines The skill and ability to research, propose, test, implement, and deploy new technologies and methodologies to solve difficult problems and issues

• Public Trust (Tier 4) is required.
• Bachelor's degree (or equivalent) in a relevant field (e.g., computer science, computer engineering, cybersecurity, or other relevant degree) is required.
• Experience with cybersecurity, zero trust and associated NIST Guidance is highly desirable.
• Experience operating and securing multi-Cloud environments, including AWS and MS Azure.
• Relevant Cloud certifications are highly desirable and acquisition of additional certifications may be required on a periodic basis. Some examples of relevant certifications include: CompTIA Cloud+, Certified Cloud Architect (CCA), AWS Certified Solutions Architect, Microsoft Certified: Azure Solutions Architect Expert, NetApp Certified Hybrid Cloud Architect, Google Certified Professional (GCP) Cloud Architect.
• At least 8 years of demonstrated programmatic experience in support of cybersecurity for Federal Government and/or commercial customers.
• Experience working on Federal Government contracts performing duties independently
• Experience in defining and following and writing technical standards and guidelines.
• A solid foundation in performing hands-on proof-of-concept, proof-of-principal, pilot, or prototyping new technologies or methodologies in lab environments
• Hands-on experience integrating new technologies or methodologies into existing security technologies applicable towards ZT, PKI, PKE, and internetworking to include IPv6 security
• Expertise with ZTMM and ZT Concepts for Federal Government architectures and current ZT guidance
• ICAM/IdAM expertise
• System integration expertise
• Code design, development, and testing expertise
• Cloud and network engineering expertise
• Excellent written and verbal communication skills and able to interact and effectively brief project and Government leadership