Note: The job is a remote job and is open to candidates in USA. GovCIO is hiring a Security Engineer to support the Department of Veterans Affairs (VA) Data Modernization initiative. The Senior Security Engineer will provide guidance on cloud security, deliver surge support for data ingestion needs, and help customers efficiently navigate the Security Impact Analysis (SIA) process.
Responsibilities
- Supports vulnerability identification, analysis, and remediation across UNIX/Linux systems , VMware infrastructures, and containerized workloads
- Apply security engineering best practices to cloud environments in AWS (EC2, IAM, VPC, S3, ECR, ES) and Azure (Key Vaults, Storage Accounts, Databricks)
- Ensures secure configurations, compliance alignment, and mitigation of risks across application, infrastructure, and data layers
- Provides end‑to‑end security support for all aspects of the Data Modernization effort, including secure workspace provisioning, access configurations, and governance controls
- Deliver surge support to help customers ingest additional datasets securely, ensuring compliance with VA security and privacy requirements
- Guide users through the Security Impact Analysis (SIA) process
- Collaborate with intake, provisioning, and data engineering teams to ensure security requirements are integrated into automated workflows and common use‑case configurations
- Support the rapid provisioning goal by ensuring security checkpoints are met within required SLAs (1–2 days when applicable)
- Coordinate with Databricks SMEs, CDW data teams, and VHA Data Lake stewards to validate security configurations and ensure secure data connectivity
- Maintain and update security documentation, standard operating procedures, security architecture diagrams, and onboarding guidance
- Support the “single front door” customer experience by contributing security-focused content related to onboarding, platform policies, and data access procedures
Skills
- Bachelor's degree plus 8 years experience in Cybersecurity, Information Technology, Computer Science, or a related field (or commensurate experience)
- Experience in security engineering, cloud security, or cybersecurity compliance roles
- Strong understanding of security frameworks such as NIST, RMF, FedRAMP, or similar governance models
- Ability to work with cross-functional teams and communicate security requirements to both technical and non‑technical audiences
- Strong analytical, problem-solving, and communication skills
- Experience conducting or supporting Security Impact Analyses (SIA), risk assessments, or security authorizations
- Proficiency with Azure cloud security tools, identity and access management (IAM), service principals, and role-based access controls
- Experience with UNIX, RedHat Enterprise Linux, Ubuntu, VMware, AWS( EC2, IAM, VPC, S3, ECR, ES), Azure ( Azure Resource provisioning, Databricks, key vaults, storage accounts),, ADF, Synapse, Azure DevOps, Github, IBM Rationale tools suite, Cockroach DB, Docker, Kubernetes, AWS EKS (Elastic Kubernetes Service), Shell, Terraform, Cloud Migration and Application development
- Experience supporting federal government environments, ideally within the Department of Veterans Affairs or healthcare-related systems
- Familiarity with Databricks security models, data lake access controls, and secure data ingestion processes
- Working knowledge of ServiceNow, Jira, SharePoint, or similar platforms used for workflow and ticketing
- Understanding of cloud data architectures, including data warehouse provisioning, linked services, and data pipeline security
- Certifications such as Security+, CISSP, CCSP, Azure Security Engineer, or equivalent
Company Overview