Cybersecurity Engineer – Cloud

• Build and secure multi-tenant cloud environments
• Implement JSIG, NIST SP 800-53, STIG, and MLS/MILS baselines across Dev/Integration/Test cloud enclaves
• Own RMF/ATO packages for cloud environments, producing SSP, POA&M, and full RMF evidence
• Validate STIG, ACAS/Nessus, SAST/DAST, and container-security outputs prior to environment promotion
• Perform functional validation of Capability Provider and External cyber artifacts
• Coordinate delivery of validated evidence to the Infrastructure TO for baseline updates
• Maintain cloud-aligned continuous monitoring, including audit logs, cloud telemetry, and Prometheus/Grafana security metrics
• Support Cloud and DSOP joint early design efforts and integrate pipeline-aware cloud security
• Validate IaC/CaC baselines using Terraform, Ansible, and Helm for secure, consistent cloud deployments and promotion gates
• Provide cyber recommendations during CCB promotion evaluations
• Offer WHY-based guidance and vector checks to Capability Providers and team members
• Collaborate with operators, engineers, Capability Providers, and government teams to support mission readiness

• Bachelor's degree and nine (9) years or more experience;
  Master's degree and seven (7) years or more experience;
  PhD or JD and four (4) years or more experience
• Proven experience securing multi classification cloud environments
• Hands-on experience performing STIG review/hardening, validating ACAS/Nessus outputs, and adjudicating SAST/DAST results
• Experience maintaining RMF/ATO artifacts, including SSP, POA&M, and continuous monitoring evidence
• Familiarity with Jira/Xacta workflows for RMF and vulnerability tracking
• DoD 8140-aligned certification: CISSP, CCSP, CASP+, or equivalent
• Desired:
  Experience architecting and securing hybrid cloud and MLS/MILS cross-domain environments
• Desired:
  Prior support to SCA assessments, including finding remediation, documentation, and assessor coordination
• Desired:
  Knowledge of secure Dev Sec Ops  pipeline integration, including image signing, SBOM/SCA, and environment gate validation
• Desired:
  Experience with advanced cyber assessment, scanning, and STIG automation tools
• Desired:
  Experience with cloud IaC/CaC security tooling, including Terraform, Ansible, Helm, and Argo CD
• Desired:
  Familiarity with Zero Trust architecture, container hardening, and cloud security automation platforms
• Strong documentation and communication skills aligned with RMF evidence and CMCC governance

Demonstrates expertise in securing multi-tenant cloud environments and managing RMF/ATO packages, including SSP and POA&M documentation. Proficient in implementing security baselines and continuous monitoring practices while collaborating with cross-functional teams to ensure mission readiness.

• Multi-Tenant Cloud Security
• RMF/ATO Management
• STIG Review/Hardening
• IaC/CaC Security Tooling
• DoD 8140-Aligned Certification

• Cloud Security
• STIG Validation
• ACAS/Nessus
• SAST/DAST
• Terraform
• Ansible
• Helm
• Continuous Monitoring
• Cyber Assessment
• Vulnerability Tracking

• Documentation Skills
• Communication Skills

• CISSP
• CCSP
• CASP+

• JSIG
• NIST SP 800-53
• STIG
• MLS/MILS
• Zero Trust Architecture
• Dev Sec Ops
• SCA Assessments

• Jira
• Xacta
• Prometheus
• Grafana
• Cloud Telemetry