Proposed Expert Level Resource must have:

• Bachelor’s degree in Engineering, Security or Technology related major, or closely allied field.

• At least 10 years of information security and engineering experience.

Formal education in Computer Science, Information Systems, Engineering, Cybersecurity or a related field can be substituted for the following years of experience:

Master’s Degree

1 year

Proposed Expert Level Resource must have demonstrated experience in the following:

• 3-5 years of experience as a Cloud Security architect and/or management role or related position.

• Strong understanding of cloud computing technologies including, Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).

• Proficient in designing security controls, security tools needs/assessment. And technology services.

• Experience working with containerized and micro architecture platform as per the industry best practices.

• Hands on experience in designing and implementing Security technologies such as SIEM, network firewalls, host-based security and security configuration.

• Experience in integrating Content Delivery Network (CDN).

• Familiarity with Cloud Security Posture Management and vulnerability management tools.

• Experience working with Managed Detection & Response (MDR) providers in setting up and investigating security alerts.

• Experience with security incident or breach investigation and development of strategies to respond to and recover from an incident or breach.

It’s desirable for the proposed Expert Level Resource to have:

• Experience in a Health Exchange or its partners would be a plus.

• CompTia Security+, CISSP or other industry recognized certifications.

• Experience with administering serverless, cloud-based enterprise applications and environments.

• Experience with administering Linux and Microsoft server environments.

• Experience and general understanding of object-oriented coding (Java, Python, .Net, etc.).

• Familiarity with CSPM and Vulnerability management tools.

• Familiarity with standards such as OWASP, IRS 1075, CMS MARS-E. NIST, and FISMA.

It’s desirable for the proposed Expert Level Resource to have experience with the following Software and Services:

• Cloudflare

• Azure Sentinel

• Tenable Nessus

• Rapid7 Insight Vulnerability Management

• Microsoft Defender

• Microsoft Azure Cloud

• Palo Alto PrismaCloud

• Palo Alto Firewall

• Palo Alto Panorama

• Jira

• Confluence

• SolarWinds Orion

• SolarWinds ServiceDesk

• PowerShell

• GitHub