Lead Cloud Security Engineer

SAIC is a mission integrator focused on using technology and innovation to serve and protect the world across defense, space, intelligence, and civilian markets. The Lead Cloud Security Engineer will design, implement, and secure cloud-based environments using Netskope, while leading Zero Trust, SASE/SSE, DevSecOps, compliance, troubleshooting, technical evaluations, and enterprise deployments.

Responsibilities:

• Design, engineer, implement, and maintain secure infrastructure and security architectures, including access to on premise and cloud applications
• Engineer and troubleshoot Software Defined Networking integrating Netskope and Cisco platforms
• Develop and implement cloud security architectures based on Zero Trust principles, including identity-centric access controls, segmentation, and Zero Trust Network Access (ZTNA)
• Design and implement SASE/SSE security capabilities, including Secure Web Gateway (SWG), Cloud Firewall, Private Access, and Data Loss Prevention (DLP)
• Integrate cloud security controls into DevSecOps and automated deployment workflows
• Develop technical architecture documentation, design documentation, implementation plans, test plans, standard operating procedures, and other engineering artifacts
• Translate cybersecurity policies, security controls, and compliance requirements into implementable technical solutions
• Troubleshoot complex cloud, network, security, and application connectivity issues
• Work with cybersecurity, network, cloud, application, and infrastructure teams to identify and resolve security and architecture issues
• Lead technical evaluations, proof-of-concepts, pilots, testing, and phased enterprise deployments
• Provide technical leadership and mentoring to engineers and other technical personnel
• Serve as a senior technical SME to customers, program leadership, security stakeholders, and engineering teams

Requirements:

• BS and 14+ years of professional experience in cybersecurity, cloud engineering, proxy, network security, security architecture, or a closely related field
• Ability to obtain and maintain a Public Trust requiring U.S. Citizenship
• 5+ years of hands-on experience with Netskope/Blue Coat/Zscaler designing, implementing, or securing cloud environments
• Demonstrated experience serving in a prior role as a Security Architect, Cloud Architect, Network Architect, or Network Engineering Lead, with responsibility for designing and implementing secure enterprise infrastructure in complex environments
• Demonstrated experience with Zero Trust security architectures and/or ZTNA
• Experience with cloud networking and security, including VPCs, network segmentation, routing, firewalls, and secure connectivity
• Experience translating cybersecurity requirements into technical architecture and engineering solutions
• Experience producing technical architecture and engineering documentation
• Experience troubleshooting complex cloud and network security issues
• Experience providing technical leadership to engineering teams and serving as a customer-facing technical SME
• Experience leading technical pilots, demonstrations, proof-of-concepts, and phased deployments
• Experience supporting U.S. Department of Defense (DoD) or large federal civilian environments, working with security and engineering stakeholders
• Experience developing or implementing security automation and/or Infrastructure as Code (IaC)
• Certified Netskope Engineer, with Direct experience implementing Netskope or comparable SASE/SSE platforms in large government organizations
• Cisco Certified Network Associate or higher
• Experience leading enterprise-scale cloud security deployments
• Experience with NIST 800-53, RMF, CDM, STIG, DIACAP, or comparable federal security frameworks
• Experience with Splunk, NetWitness, SolarWinds, Wireshark, or comparable security/network monitoring tools
• Experience with Docker, Kubernetes, MicroK8s, or other container technologies
• Experience developing automated troubleshooting, diagnostics, reporting, or security operations workflows