Cloud Cyber Security Architect

Req ID: RQ188883Type of Requisition: RegularClearance Level Must Be Able to Obtain: NonePublic Trust/Other Required: MBI (T2)Job Family: Cyber SecuritySkills:Change Management,Microsoft Azure,Solution Architecture,Technology Implementations,Windows Azure CloudCertifications:Microsoft Certified: Azure Security Engineer Associate (AZ-500) - Microsoft - Microsoft Inc, Microsoft Certified Azure Solutions Architect - Microsoft, Microsoft Azure Infrastructure and Deployment (AZ-100) - MicrosoftExperience:10 + years of related experienceJob Description:Seize your opportunity to make a personal impact as a Cloud Security Architect supporting our HHS HRSA customer. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.As a hands-on Cloud Security Architect, you will architect, engineer, test and implement a TIC 3.0 Cloud environment with a team of engineers and subject matter experts.Candidates must be able to travel to customer location Maryland to obtain badging prior to startingResponsibilities:

Will migrate existing cloud hosted applications to the new cloud environment.

Support the migration of public facing applications hosted on Citrix NetScaler to an Akamai Cloud SASE Load Balancing solution with OKTA Single-Sign-On (SSO).

Works with other team members and SME across the program to achieve a unified goal.

Create and provide Infrastructure as Code (IaC) for quick repeatable deployments.

Ensure solution scales appropriately, are resilient, and support security capabilities in accordance to CISA TIC 3.0 guidelines.

Strong understanding of DNS, Firewalls (Azure Firewalls and WAF), Content Delivery Network (CDN), routing, global traffic management (for load balancing), intrusion detection and IPv6.

Work with a team of DevOps engineers and SMEs to build, test, validate and demonstrate a complete TIC 3.0 Proof-of-Concept (POC) with Cloud SASE And Azure Cloud Firewall solutions.

Mentor and support a team of engineers to provision/configure Azure Cloud Firewall per customer requests in accordance to vendor best practices.

Perform and support policy enforcement, at all application levels, in the environment, including but not limited to, SASE provider, Azure Cloud Firewall and within Azure for micro-segmentation.

Integrate with SASE Portal authentication with customer IDP, OKTA, providing Multi-Factor Authentication (MFA).

Help build a customer chargeback model, with reporting metrics.

Help Build reports for post-migration cost estimates based upon current utilization, at the organization and application owner level, in addition to scheduled WAF reports within the SASE solution meeting NIST 800-53 requirements

Work with the team, customers and SMEs to develop required logging requirements (splunk, solarwinds, uptime, etc.).

Develop and adhere to Standard Operating Procedures (SOP).

Document technical implementation plans and present to customer for approval.

Develop, document, and present a comprehensive migration strategy, including timelines, resources, and risk management plans.

Perform migration activities from legacy cloud environment to new environment.

Work with Program and Project management throughout the period of performance.

Perform post migration activities including remediating any issues identified.

Furnish/Transfer any software or cloud subscriptions required for the duration of the project.

Provide training to the government, and their successors, on details of the migration process, administration, maintenance, support and operational use of the solution.

Participates in special projects, as needed.

Lead and provide technical support in Change Management processes that directly impact production environment.

Resolve technical problems that occur and on-call support for non-business hours.

Provide Weekly and on-demand Status Reports on work performed.

Required Skills:

Bachelor’s degree in a related STEM field and 10+ years of experience in an Architecture position.

Certification in at least one or more Azure certifications (Solutions Architect, Security Engineer, Security/compliance/Identity, etc)

8+ years of experience working in a large-scale enterprise Azure Organization

Must be able to obtain a Public Trust and sucessfully pass a thorough government background screening process (forms/fingerprinting).

Ability to travel to Rockville, MD for onboarding and badging process.

Desired Skills:

Experience with Word, Excel, PowerPoint, Visio, SharePoint, ServiceNow and MS Teams.

SCRUM and Kanban Agile Methodologies

Experience with Confluence, Trello, ServiceNow and/or JIRA

Experience with any HHS agencies or entities

Demonstrated strong technical skills and analytic abilities, as well as experience performing system security analysis and risk management.

Demonstrated experience performing complex technical tasks with minimal direction.

Demonstrated experience in translating an understanding of systems and applications into test plans and perform hands on testing.

Demonstrated knowledge of risk management.

Possesses experience with communicating vulnerability results and risk posture to stakeholders.

Possess a broad knowledge of Azure best practices, policies and guidance.

#GDITFedHealthJobs #OpportunityOwned#GDITCareers#WeAreGDITThe likely salary range for this position is $176,446 - $218,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. GDIT typically provides new employees with 15 days of paid leave per calendar year to be used for vacations, personal business, and illness and an additional 10 paid holidays per year. Paid leave and paid holidays are prorated based on the employee’s date of hire. The GDIT Paid Family Leave program provides a total of up to 160 hours of paid leave in a rolling 12 month period for eligible employees. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.We connect people with the most impactful client missions, creating an unparalleled work experience that allows them to see their impact every day. We create opportunities for our people to lead and learn simultaneously. From securing our nation’s most sensitive systems, to enabling digital transformation and cloud adoption, our people are the ones who make change real.GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.