Job Description
Job DescriptionAbout the Role:
ANGARAI – a professional management consulting firm – is seeking a Systems Security Specialist to support a key government client in ensuring the security, compliance, and resiliency of its IT infrastructure. The ideal candidate will have hands-on experience in cloud and application security, Identity and Access Management (IAM), incident response, and system governance for mission-critical systems.
Key Responsibilities:
-
Develop and implement cloud security controls, processes, and automation tools (AWS/Azure).
-
Conduct system-wide security assessments and cloud penetration testing.
-
Monitor cloud and on-prem systems, identify security vulnerabilities, and provide remediation.
-
Perform incident response and forensic evaluations using SIEM tools.
-
Support the secure design and implementation of applications across the SDLC.
-
Maintain and update security documentation including Security Plans, POA&Ms, Risk Assessments, and more.
-
Manage and maintain IAM solutions including ForgeRock and SailPoint.
-
Perform account provisioning, access reviews, and implement role-based access control.
-
Configure and manage firewalls and access controls (e.g., AWS Security Groups, WAF).
-
Evaluate proposed changes for security impacts and maintain secure configuration baselines.
-
Comply with applicable NIST, IRS 1075, MARS-e, and other federal/state standards.
RequirementsRequired Qualifications:
-
2+ years of experience in security operations, governance, and compliance.
-
Proven hands-on experience with cloud security (AWS preferred).
-
Experience with SIEM, incident response, and forensics.
-
Knowledge of AWS security features: GuardDuty, Macie, CloudTrail, CloudWatch, etc.
-
Experience with administering and monitoring IAM tools and performing user access control tasks.
-
Hands-on experience with Windows and Linux OS security administration.
-
Familiarity with federal security frameworks such as NIST SP 800-53.
Preferred Qualifications:
-
4+ years experience with ForgeRock and SailPoint IAM products.
-
Strong experience performing penetration testing and vulnerability assessments.
-
Familiarity with ACL configuration, password policies, and group management in enterprise environments.
-
Scripting experience (Java, JavaScript, Shell).
-
Experience configuring ASA or Fortinet firewalls.
-
Prior experience working in a government agency or regulated environment.
-
Experience supporting PMO governance and compliance processes.
Certifications (Preferred):
-
CISSP, CISA, CCSP, CEH, ISO 27001, CSA STAR Cloud Security, or equivalent.