Cloud Security Architect - AWS/Azure Focus

- Implement security controls to ensure compliant cloud environments on AWS, GCP, or Azure while adhering to FISMA, NIH policies, and federal security standards - Recommend, design, and support cloud security services and control implementations, including Identity Access, Privileged Access, Vulnerability Management, Configuration Compliance, encryption, and centralized security log management - Monitor cloud platforms for security events, irregularities, and configuration drift utilizing SIEM tools (e.g., Splunk); conduct vulnerability assessments, track remediation efforts, and maintain dashboards with measurable metrics to communicate overall security posture - Integrate and optimize enterprise security solutions like Splunk and Tenable, and other data sources to improve continuous monitoring, event correlation, and compliance visibility across a hybrid environment - Investigate and respond to security incidents and alerts, perform root-cause analysis, and execute proper remediation actions in accordance with NIHs established incident response plan - Conduct threat modeling and security evaluations of cloud deployments to identify and mitigate vulnerabilities; develop security requirements and provide guidance for applications migrating from on-premise systems to cloud environments - Enhance and automate security and compliance checks using various tools and scripting; evaluate emerging platforms, such as AI-based capabilities, to boost coverage, visibility, and operational efficiency - Provide security guidance, best practices, and compliance support to developers, operations teams, system owners, and other stakeholders, while promoting security awareness