Cloud Onboarding Engineer – Audit

Description

Job ID BT-448. Skill level: Senior Principal.

The role covers onboarding cloud environments into agency enterprise services and security monitoring, with a focus on audit.

Requirements

• You have shown experience linking commercial cloud platforms with agency enterprise services and security monitoring designs.
• You have hands-on work designing, deploying, hardening and running OCI solutions.
• You have connected OCI audit, logging, monitoring and security telemetry to enterprise SIEM and monitoring tools.
• You have set up audit and telemetry sources at the cloud, network, platform, operating system, database and application layers.
• You have designed secure log collection and forwarding using APIs, agents, syslog, event streaming, object storage, message queues or similar mechanisms.
• You can verify that logs are complete, timely, intact, retained correctly, access-restricted, parsed and normalized for enterprise monitoring.
• You have fixed SIEM integration problems across connectivity, ingestion, certificates, proxies, firewalls, field mapping, alerting and dashboards, and closed monitoring gaps and alert noise.
• You work knowledgeably with OCI IAM, Audit, Logging, Cloud Guard, network security, secrets and key management, Zero Trust, RMF, ICD 503 and NGA A&A processes.
• You write clear documentation and coordinate well with stakeholders on architecture diagrams, integration designs, test plans, runbooks and dashboards.
• You have 8+ years of relevant experience.
• Desired: an associate or professional OCI certification in Architect, Security, Networking or Cloud Operations.
• Desired: experience with enterprise audit collection and SIEM platforms such as Cribl and Elastic.
• Desired: experience supporting authorization packages, control validation and remediation tracking.
• Desired: experience with Terraform, OCI Resource Manager or similar automated cloud configuration tools.

Conditions

You must hold an active Poly clearance; applicants without one will not be considered.