Job Url: https://www.remoterocketship.com/company/chronus/jobs/cloud-operations-security-engineer-contract-to-hire-bellevue-washington-united-states-contract-fully-remote-united-states-remote Job Description: Chronus Website LinkedIn All Job Openings Chronus empowers the world’s top employers to shape the future-ready workforce, delivering mentoring software that unleashes the full potential of their teams. Offering unmatched DEI capabilities and expertise, along with the most flexible platform on the market, Chronus is built for your unique culture and every employee, at every stage. With Chronus, mentoring becomes the new strategic lever for impacting workforce initiatives such as retention, engagement, advancement and diversity. Mentoring Solutions • Student-Alumni Mentoring • Employee Development • Career Mentoring • Diversity 51 - 200 employees 💰 Debt Financing on 2021-08 Cloud Operations & Security Engineer (CONTRACT TO HIRE) Bellevue , Washington , United States | Contract | Fully remote 3 days ago ☕ Washington – Remote 💵 $60 - $80 / hour ⏳ Contract/Temporary 🟡 Mid-level 🟠 Senior 💻 Frontend Engineer 🦅 H1B Visa Sponsor Ansible AWS Cloud Cyber Security EC2 Linux Python Terraform Apply Now Receive Emails with Similar Jobs Report problem 📋 Description • Compliance & Certification Support: National Agency Check: Completion of a National Agency Check. • Support annual 3PAO assessments for FedRAMP and IL4 certifications, typically conducted in Q1. • Prepare and present detailed yearly status reports to FedRAMP external stakeholders. • Maintain compliance documentation and ensure all evidence/artifacts are up to date for audits. • Client & Stakeholder Engagement: Troubleshoot IL4/FedRAMP-related issues for clients and customers. • Participate in client calls as needed (with prior notice) to provide technical and compliance insights. • Security & Maintenance : Perform patch management and software updates for all relevant systems. • Conduct ongoing vulnerability scanning, apply DISA STIGs, and remediate findings. • Carry out regular key rotations, port/protocol reviews, and maintain hardware/software inventories. • Review and address findings from vulnerability assessments and penetration tests. • AWS Infrastructure Management : Deploy, configure, and maintain AWS services (EC2, S3, RDS, Lambda, VPC, CloudFront, etc.). • Monitor infrastructure performance, reliability, and security. • Implement backup and disaster recovery plans. • Maintain and test scenario-based security incident response plans. • Operations & Process: Proactively monitor logs and alerts to detect and resolve issues. • Collaborate with development and operations teams to align infrastructure with application needs. • Manage work using a process-driven approach with JIRA tickets, email approvals, and SIA reviews. • Engagement: Approximately 4-5 hours per day 🎯 Requirements • Proficiency with Linux terminal and CLI-based administration. • Strong scripting skills (e.g., Bash, Python). • Solid knowledge of security principles and vulnerability management. • Excellent written and verbal communication skills. • Basic understanding of cloud services (preferably AWS) • Background in information security or cybersecurity compliance. • Exposure to FedRAMP or IL4 compliance processes. • Familiarity with DISA STIG hardening. • Experience with infrastructure automation tools (e.g., Terraform, Ansible, CloudFormation). • Must be a U.S. citizen. • Must successfully complete a NACLC background investigation within 1 month of starting the contract. • National Agency Check: Completion of a National Agency Check. • Financial Review: Verification of the subject's financial status, including credit bureau checks covering all locations where the subject has resided, been employed, or attended school for six months or more for the past seven years. • Date and Place of Birth: Corroboration of date and place of birth through a check of appropriate documentation; a check of Bureau of Vital Statistics records when any discrepancy is found to exist. • Local Agency Checks: As a minimum, all investigations will include checks of law enforcement agencies having jurisdiction where the subject has lived, worked, and/or attended school within the last five years, and, if applicable, of the appropriate agency for any identified arrests within the last five years.