Cloud Security Engineer (Architect)

Summary

As a Cloud Security Engineer, you will be responsible for identifying risks and making corrective security and technology recommendations to secure GSA cloud systems. Location of position: The Office of the Chief Information Security Officer is responsible for delivering secure and exceptional technology solutions and experiences to GSA. Position can be filled in any of the following locations: Kansas City, MO; Fort Worth, TX; Washington, DC; Tacoma, WA; Lakewood, CO or Raleigh, NC.

Duties

We are currently filling one vacancy, but additional vacancies may be filled as needed. As a Cloud Security Engineer you will perform the following duties: Developing and maintaining the security engineering framework and related process and supporting guidelines, integrated into the GSAIT System Development Lifecycle (SDLC), ensuring security engineering and security consulting services are delivered as a formal program capability; utilizes a multidisciplinary approach to ensure that IT security is embedded throughout the IT architecture (e.g. system and cloud architecture, secure API integration, required key technical controls, code quality, cryptography, hash functions, key material handling etc.). Ensures multiple software, hardware, communications, process, and integration components across a project are designed and implemented to create a single functioning system that can securely deliver the business functionality proposed; piloting security solutions, procuring necessary hardware/software, and implementing and formally assessing these solutions to verify security features and determine their efficacy against GSA IT Security requirements. Reviews and approves all proposed Security Architectures prior to the commencement of the system build (architecture, infrastructure, and code); provides technical expertise and advice on the restructuring and/or re-architecting of GSA networks to ensure the best secure placement and configuration of network tools and appliances to provide the maximum protection of various types of sensitive Government data. Design, develop, and integrate interfaces that could be either software or processes to resolve highly complicated and evolving IT security issues faced by GSA; ensures new technologies are implemented following IT Security Engineering standards, integrated with the agency's strategic IT and IT security architecture; and are free of gaps in security. Provides security consulting and engineering support for GSAIT information systems and emerging IT and IT Security initiatives, including but not limited to: Cloud computing, bring-your-own-device (BYOD), Virtual Desktop Infrastructure, mobile devices, Remote Access Systems, Mobile Computing Platforms, Active Directory, System Virtualization, physical access control systems (building security), and identity and access management solutions.

Requirements

If selected, you must meet the following conditions: Current or Former Political Appointees: The Office of Personnel Management (OPM) must authorize employment offers made to current or former political appointees. If you are currently, or have been within the last 5 years, a political Schedule A, Schedule C or Non­Career SES employee in the Executive Branch, you must disclose this information to the HR Office. Failure to disclose this information could result in disciplinary action including removal from Federal Service. Serve a one year probationary period, if required. Undergo and pass a background investigation (Tier 2 investigation level). Have your identity and work status eligibility verified if you are not a GSA employee. We will use the Department of Homeland Security's e-Verify system for this. Any discrepancies must be resolved as a condition of continued employment. Complete a financial disclosure report to verify that no conflict, or an appearance of conflict, exists between your financial interest and this position.

Qualifications and evaluation

Your application will be evaluated against the basic qualifications which includes any specialized experience and/or education requirements (if applicable). Qualified candidates will be considered in accordance with the Office of Personnel Management Direct Hire Guidelines. Applications will not be rated or ranked. Veterans' Preference is not applicable to the direct hire recruitment procedures. Failure to submit a complete application or missing required supporting documentation may result in you not being considered for the position. Falsification of your background, education, and/or experience is grounds for non-selection or dismissal if hired. SME Resume Review: Subject Matter Experts (SMEs) will evaluate your resume to determine your qualifications for this position using a pass/fail process. ICTAP/CTAP Candidates: The Interagency Career Transition Assistance Plan (ICTAP) and Career Transition Assistance Plan (CTAP) provide eligible displaced Federal competitive service employees with selection priority over other candidates for competitive service vacancies. To be qualified you must submit appropriate documentation (a copy of the agency notice, your most recent performance rating, and your most recent SF-50 noting current position, grade level, and duty location) and be found “well-qualified" for this vacancy. In addition to meeting the basic qualifications stated in the qualification section of this announcement, well qualified is defined as: experience that exceeds the minimum qualifications of the position, demonstrated by meeting at least 3 out of 5 KSA's listed below: Knowledge of IT principles, concepts, standards, practices, systems security engineering, Amazon Web Services (AWS), and emerging cloud technologies to be used to grow and assist an office in securing cloud deployments. Skill in working with multiple operating systems, including Linux Operating Systems (Red Hat Enterprise Linux, CentOS, Ubuntu), and knowledge of continuous integration/automation tools (e.g. Ansible, Chef, Puppet, Jenkins, Git, Gerrit). Knowledge of cloud security (AWS in particular), virtualization security, web application security, network architecture and active directory design/segmentation, and secure coding, and source code reviews (e.g. Java, C++, C#, ASP .NET, VB, APEX, Node, Go, Python, PERL, PHP, RoR, etc.) to ensure system security. Knowledge of Information Technology Security programs, including applying experimental theories and new developments to problems not susceptible to treatment by accepted methods. Ability to provide advice and guidance on high level IT security policy issues and initiatives applicable to IT environments; and serve as a senior expert and consultant to top agency management officials to advise on integrating IT programs with other programs of equivalent scope and complexity. Demonstration of these KSA's must be supported by your resume. You may preview questions for this vacancy.

Education

There is no substitution of education for experience at the GS-14 level.

Benefits

You will have access to many benefits including: Health insurance (choose from a wide range of plans) Life insurance coverage with several options Sick leave and vacation time, including 11 paid holidays per year Thrift Savings Plan (similar to a 401(k) plan) Transit and child care subsidies Flexible spending accounts Long-term care insurance Training and development

How to apply

Submit a complete online application including any required documents prior to 11:59 pm Eastern Time on the closing date of the announcement. You can modify or complete your application any time before the deadline. Simply return to USAJOBS, select the vacancy, and update your application. For more detailed instructions on how to apply, click here: Apply for a GSA Job. If you are having issues applying to this announcement, you should switch to a different browser, network or device. Note: Your firewall may block your transfer from USAJOBS to your GSA application. To begin, click the Apply Online button on the vacancy announcement. Sign in or register on USAJobs and select a resume and documents to include in your application. Resumes exceeding two pages will not be accepted by USAJOBS and will prevent your application from moving forward in the hiring process. Please see Required Documents for additional details. Once you have clicked Apply for this position now, you will be taken to the GSA site to complete the application process. Click the Apply To This Vacancy and complete all steps in the application process until the Confirmation indicates your application is complete. If you click Return to USAJobs or get timed out prior to receiving confirmation, your application will not be submitted and cannot be considered for this job. Note: Review the REQUIRED DOCUMENTS section of this announcement to determine which apply to you and must be submitted online. You may choose one or more of the following options to submit your document(s): Upload (from your computer) or USAJOBS (click the "USAJOBS" link to complete the transfer process). Need Assistance? Questions or issues completing an application and/or submitting documentation - contact fedhirehelp@applygovernment.com or 1-866-656-6831 Monday-Friday 7AM - 7PM EST, except for Federal holidays Specific questions on the position - contact the HR representative (Monday-Friday during normal business hours) listed on the announcement, prior to the application deadline You must receive HR approval before deviating from these instructions. Be sure to APPLY EARLY as most assessments must be completed fully and submitted before the announcement closing.

Required documents

ALL required documents must be submitted before the closing date. Review the following list to determine what you need to submit. Resume: Must not exceed two pages. Refer to the Qualifications section for resume requirements. If you are ICTAP/CTAP eligible - submit a, b, and c: (a) proof of eligibility including agency notice; (b) SF-50, and (c) most recent performance appraisal. Current or Former Political Appointees: Submit SF-50.

Additional information

Candidates will not be hired based on their race, sex, color, religion, or national origin. Applicants are encouraged to make their resume searchable in their USAJOBS.gov profile. This will allow Federal hiring specialists and hiring managers across agencies to find their resume as part of agency recruitment campaigns or staffing searches. If you apply to this position and are selected, we will not ask about your criminal history before you receive a conditional job offer. If you believe you were asked about your criminal history improperly, contact the agency or visit GSA's webpage. Relocation-related expenses are not approved and will be your responsibility. On a case-by-case basis, the following incentives may be approved: · Recruitment incentive if you are new to the federal government · Relocation incentive if you are a current federal employee · Credit toward vacation leave if you are new to the federal government Additional vacancies may be filled through this announcement in this or other GSA organizations within the same commuting area as needed; through other means; or not at all.