Position Description : Serco Inc. is currently seeking a Mid-Level AWS Security Engineer to join our talented team (100% Remote). If youre looking for a high profile and challenging Security Engineer position supporting Centers for Medicare and Medicaid (CMS), then Serco has a great opportunity for you! The remote Network Engineer position will be on a dynamic team, supporting our CMS program based out of Herndon Virginia. The position reports to IT Operations Network Manager. Serco supports the Centers for Medicare & Medicaid Services, a federal agency within the United States Department of Health and Human Services that administers the Medicare program and works in partnership with state governments to continue supporting eligibility determinations for consumers purchasing health insurance through the Federal Health Insurance Exchanges. As a key member of our cloud infrastructure and security team, you will play a crucial role to run the daily security operations checks, review monitoring and alerting, work Antivirus and malware tools, and be a part of log review, incident response, and forensics. You should be familiar with standard security concepts, practices, and procedures for the AWS cloud and on-premises environments; NIST and STIG, knowledge of Zscaler Zero Trust Architecture, and must have the ability to test and evaluate security concepts and security application changes to eliminate problems and make improvements. This position requires flexible working hours; you must be willing to be on-call, work evenings, and/or weekends as needed for troubleshooting or implement changes In this role you will: Review and manage on-premises and AWS security through security and compliance tools and standards such as NIST and STIG. Have knowledge of AWS concepts such as Virtual Private Cloud (VPC), subnets, route tables, internet gateways, load balancers, Security Groups, NACLs, and transit gateways. Understand AWS concepts, features, and services and have the ability to review, configure, and manage AWS network security services such as Security Groups and NACLS. Collaborate with cross-functional teams to review environment vulnerabilities, discuss remediation plans, and review environment risks. Utilize advanced monitoring and troubleshooting tools, such as SIEM Splunk/Splunk Enterprise Security, AWS CloudWatch, AWS CloudTrail, and SolarWinds Orion, to proactively identify and resolve network, system, and application issues and security incidents. Have working knowledge of virtual and physical firewalls such as Palo Alto Panorama and Zscaler ZPA/ZIA and Cisco switch ACL management. Experience working with antivirus and malware detection solutions with the ability to identify and research potential malicious issues and participate in incidence response. Have knowledge of Zero Trust Architecture with the understanding access management, environment segmentation, and device and user authentication. Evaluate and recommend new AWS services, features, and best practices to improve the performance, security, and cost-effectiveness of our cloud infrastructure. Work with the System Security Office to collect audit artifacts, create operational procedures, and provide/participate in training and guidance from team members to ensure -knowledge sharing and continuous improvement. Participate in on-call rotation to provide support for network-related incidents and perform after hours upgrades and changes as needed. Qualifications: To be successful in this role, you will have: United States Citizenship/Green Card required Willing to be on-call and work evening and weekends as needed for troubleshooting or implement changes A Bachelor’s degree in Computer Science, Information Technology, or a related field Or a High School Diploma with 6 years of related security and AWS experience in lieu of degree Minimum 2 years of related security and AWS experience Understanding of AWS services, features, and concepts including VPC, Elastic Load Balances, Security Groups, and NACLs Excellent problem-solving and troubleshooting skills, with the ability to analyze complex network, system, and application issues and implement effective solutions Ability to perform daily Security tools checks, identify irregular activities and track malicious events Working knowledge of SIEM and logging tools such as Splunk, CloudWatch, CloudTrails, and SolarWinds for log review, monitor and reporting, and troubleshooting issues systems Expertise in Splunk Enterprise Security to help with threat management and identifying malicious activity Experience with antivirus and threat hunting tools such as CrowdStrike Falcon endpoint protection Experience with virtual and physical Palo Alto Firewall and Panorama rule/policy management and Cisco switch ACL management Knowledge of Zscaler Zero Trust Architecture and ability to learn ZPA and ZIA for application and internet access changes Strong communication and collaboration skills, with the ability to work effectively in a cross-functional team environment Being remote, can multitask, manage time, schedule changes, and attend meetings using Microsoft Teams, Outlook, and MS365 Ability to travel up to 10% Additional desired experience and skills: Knowledge of Infrastructure as Code (IaC) tools such as Terraform or CloudFormation is a plus Experience in NetBrain, Skybox, SolarWinds Orion is a plus AWS Certified Cloud Practitioner preferred Knowledge of SAFE Agile is a plus If you are a skilled and motivated AWS Security Engineer with a passion for advanced networking concepts and a desire to contribute to cutting-edge cloud infrastructure projects, we encourage you to apply. Join our team and play a pivotal role in shaping the future of our cloud-based operations. In compliance with state and local laws regarding pay transparency, the salary range for this role is $66,558.60 to $110,931.00; however, Serco considers several factors when extending an offer, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. Company Overview : Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Sercos 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters. To review Serco benefits please visit: . If you require an accommodation with the application process please email: or call the HR Service Desk at , option 1. Please note, due to EEOC/OFCCP compliance, Serco is unable to accept resumes by email. Candidates may be asked to present proof of identify during the selection process. If requested, this will require presentation of a government-issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice . Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email . Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics. #J-18808-Ljbffr
amazon-cloudwatch Splunk Security amazon-cloudformation Infrastructure as Code (IaC) SIEM Terraform Amazon Web Services (AWS) SAFe