Cloud-Software Eng III

Location

Remote but must be located within commuting distance to Durham, NC

Cloud-Software Eng III (US)

The Global Certification Team for XaaS certifications is building a Center of Excellence for Cisco's global cloud certifications. This team is growing to centralize and standardize the cloud certification process for Cisco, including FedRAMP, SOC2, ISO27001, etc. The SOC2 Cloud Authorization Engineer (CAE) role is to support securing initial global regulatory cloud certifications as well as annual renewals for Cisco cloud offer certifications by: - providing technical guidance on the implementation and documentation of the cloud certification requirements, - ensuring each certification is compliant with relevant regulatory and certification security requirements (e.g. FISMA, FedRAMP, SOC2, ISO 27001, ISO 27017, ISO 27018, PCI DSS, HITRUST, CJIS, C5, SOC, etc.), - partnering with the business unit to remove impediments beyond/outside of the business unit that jeopardize securing or retaining a cloud certification.

The CAE will have broad technical background and experience necessary to support multiple cloud product certifications which may span offices, time zones and hemispheres. The CAE will have experience with architecture, design and operations of cloud solutions and the how to meet security compliance requirements. Must have the ability to propose technical solutions to complex security compliance issues. The CAA should have a clear understanding and experience implementing SOC 2 Type II certifications, knowledge and/or experience with at least one other major cloud certification (FedRAMP, SOC2, ISO 27001, or HITRUST), and understanding of the cloud authorization processes. NIST and/or FISMA experience is also preferred along with basic competencies in the areas:

Day to Day Duties

Working with multiple stakeholders (internal and external) across product lines to assess and identify security compliance gaps and propose technical remediation solutions and options necessary to secure a certification

Assisting with technical questions regarding control implementation as well as post authorization activities such as significant change, annual authorization renewals, etc.

Reviewing current system security measures and recommending and implementing enhancements

Translating complex concepts and solutions into documents required for the certification (i.e. System Security Plan)

Working knowledge or experience conducting system security and vulnerability analyses and risk assessments

Updating security knowledge by tracking and understanding emerging security practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations

Collaborating effectively across multiple organizations with diverse personalities and expertise to drive to agreement on complex issues

Minimum Qualifications

**Must be a US Citizen**

2+ years specialized experience in reviewing security documentation for requirements, compliance, compliance documentation, testing results, standard operating procedures, system security plans, etc.

2+ years of SOC2 Type II certification experience

Understanding of cloud security and overall cloud computing architecture

Experience with communication between leadership, operational teams, development teams and certification teams

Understanding of development of presentation materials and overall presentation skills around technology and compliance

Experience applying process improvement techniques

Excellent written and verbal communication skills

Solid understanding of security protocols, cryptography, authentication, authorization and security

Desired Skills

2+ years of certification experience with (ISO27001, FedRAMP, PCI DSS, SOC2, HITRUST, or CJIS)

Applicable industry security certifications (e.g. CAP, CISA, Associate of CISSP, GIAC, etc.) a plus

Secure Software Development Lifecycle experience a plus

Experience writing scripts and tools