• Supports the design, implementation, and operation of secure AWS cloud environments (e.g., AWS GovCloud, DoD IL5), including identity and access management (IAM), network security, encryption, logging/monitoring, and configuration baselines.
• Implements and maintains security controls for cloud workloads that handle Controlled Unclassified Information (CUI) and/or USG federal information, ensuring alignment with applicable frameworks (e.g., CMMC/NIST 800-171, FedRAMP/FISMA/NIST 800-53), as directed by program requirements.
• Works with internal compliance leads to map and implement required controls in AWS and other cloud environments; provides technical input for System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and related documentation for cloud systems.
• Supports efforts to achieve and maintain DoD IL5 or equivalent impact levels for cloud workloads, including preparation for assessments, evidence collection, and remediation of findings.
• Collaborates with USG customers, program security teams, and other stakeholders to understand security requirements for specific tenants and workloads, including when environments transition to USG federal information systems and fall under non-CMMC frameworks.
• Conducts regular security control assessments and configuration reviews for cloud resources; validates that implemented controls are effective and aligned with approved baselines.
• Reviews and analyzes security logs, alerts, and reports from cloud-native services (e.g., AWS CloudTrail, GuardDuty, Security Hub, Config) and SIEM platforms to identify potential security and compliance issues in cloud environments.
• Supports vulnerability management for cloud workloads, including scanning, triage, coordination with engineering teams, and tracking remediation in accordance with applicable requirements and timelines.
• Contributes to the development, review, and maintenance of cloud security policies, standards, and procedures, including documentation of shared responsibility models and tenant-specific requirements.
• Prepares and delivers technical and compliance-related information to both technical and non-technical stakeholders, including internal leadership and USG representatives.
• Maintains the strict confidentiality of sensitive information.
• Performs other duties as assigned.

• Typically requires a bachelors degree in related field and five or more years of professional computer system security experience or related field.  Equivalent professional experience may be substituted in lieu of education.
• Equivalent professional experience may be substituted in lieu of education.
• Must demonstrate a complete understanding of computer system security principles, concepts, practices and techniques.
• Must have experience organizing, planning scheduling, conducting, and managing work assignments to meet project milestones or established completion dates.
• Must possess the ability to understand new concepts quickly and apply them in an evolving environment while contributing to the development of new processes.
• Must be customer focused and possess:
  • (1) the ability to identify issues, analyze and interpret data and develop solutions to a variety of complex issues;
  • (2) strong analytical skills, verbal and written communication skills to accurately document, report and present findings;
  • (3) strong interpersonal skills and ability to interface with other professionals; and
  • (4) strong computer skills.
  • Ability to work both independently and in a team environment is essential as is the ability to work extended hours as required.

• Experience supporting DoD contracts and working with Controlled Unclassified Information (CUI).
• Experience conducting or supporting security audits, assessments, or authorization activities for cloud systems.
• Familiarity with FedRAMP, NIST SP 800-171, NIST SP 800-53, or other USG cybersecurity frameworks.
• Hands-on experience with AWS security services (e.g., IAM, KMS, CloudTrail, GuardDuty, Security Hub, Config) and securing workloads at IL5 or similar impact levels.
• Experience with cloud security architecture and best practices for multi-account AWS environments, including network segmentation, zero trust concepts, and secure landing zones.
• Experience with GRC (Governance, Risk, and Compliance) platforms.
• Knowledge of supply chain risk management requirements (e.g., NIST SP 800-161).
• Experience with SIEM tools, vulnerability scanners, and other cybersecurity monitoring platforms.
• Relevant certifications such as CISSP, Security+, CISM, CISA, CRISC, AWS Certified Security - Specialty, or AWS Certified Solutions Architect.
• Experience supporting RMF or other authorization processes for cloud-based USG information systems.

Clearance Required?: Yes
Clearance Level: Top Secret (current SCI access with CI Poly)
US Citizenship Required?: Yes