Five years of relevant DoD RMF A&A/C&A experience.
Experience applying RMF and NIST C&A requirements.
Department of War information assurance experience.
Experience assessing information assurance controls for large, complex systems.
Familiarity with FedRAMP assessment methodology across six domain areas.
Responsibilities
Provide cloud computing and network security expertise for classified and unclassified environments.
Evaluate cloud and WAN architectures and associated security risks.
Support implementation of NIST Risk Management Framework requirements.
Conduct cloud security assessments and security control evaluations.
Assess cloud environments against FedRAMP security and privacy controls.
Identify cybersecurity vulnerabilities and recommend mitigation strategies.
Coordinate with Government cybersecurity personnel and cloud service providers.
Benefits
Work primarily from a contractor-owned facility near Fort Belvoir, VA.
Opportunity to work onsite or reside within commuting distance of multiple locations.
Engage in a dynamic work environment with extended hours at a computer and in various settings.
Full Job Description
Cloud Computing Specialist - Subject Matter Expert provides specialized cloud cybersecurity, risk management, and information assurance expertise supporting a DoD agency's enterprise cloud and WAN integration and modernization initiatives. Ensures solutions and connected infrastructure satisfy DoD security requirements, Risk Management Framework standards, and applicable cloud accreditation requirements.
Responsibilities Include:
Provide cloud computing and network security expertise supporting classified and unclassified enterprise environments.
Evaluate cloud and WAN architectures, security controls, and risks associated with enterprise cloud migrations.
Support implementation of NIST Risk Management Framework requirements, including NIST SP 800-37 and SP 800-53.
Conduct cloud security assessments, C&A/A&A reviews, and security control evaluations.
Evaluate cloud environments against FedRAMP security and privacy control requirements.
Assess cloud security across architecture, data protection, infrastructure, applications, operations, and compliance domains.
Identify cybersecurity vulnerabilities, security control deficiencies, and implementation risks.
Develop security recommendations, mitigation strategies, and corrective action plans.
Support cloud connectivity and integration with AWS, Microsoft Azure, GCP, and other Government-authorized cloud environments.
Review cloud migration plans for compliance with DoD information assurance requirements.
Support security engineering activities involving Secure Cloud Computing Architecture and cloud access infrastructure.
Develop and review RMF documentation, security assessment artifacts, and authorization support materials.
Coordinate with Government cybersecurity personnel, engineers, and cloud service providers.
Support security requirements for environments handling information at different classification and impact levels.
Provide expert guidance concerning cloud security best practices and emerging cloud cybersecurity technologies.
Required Skills, Qualifications and Experience:
Experience:
Five years of relevant DoD RMF A&A/C&A experience.
Experience applying RMF and NIST C&A requirements.
Department of War information assurance experience.
Experience assessing information assurance controls and conducting C&A reviews for large, complex information systems.
Well-versed in FedRAMP assessment methodology of security and privacy controls deployed in cloud information systems to include six (6) domain areas: Architectural Concepts & Design Requirements, Cloud Data Security, Cloud Platform & Infrastructure Security, Cloud Application Security, Operations, and Legal & Compliance.
Education:
High School Diploma.
Citizenship and Clearance:
US Citizenship is required.
DoD Secret clearance with Tier 3/NACLC/ANACI investigation.
Certification:
DoD 8570/8140: IAM Level III baseline certification (CISSP, CISM, or GSLC).
Cloud Computing Security Certification.
Location:
Work will be primarily performed from a contractor-owned facility near Fort Belvoir, VA and customer locations. Candidates may work onsite/reside within commuting distance of one of the following:
Fort Belvoir, VA (highly preferred)
Battle Creek, MI
Columbus, OH
Dayton, OH
New Cumberland, PA
Ogden, UT
Philadelphia, PA
Richmond, VA
Anniston, AL
San Diego, CA
Fort Bragg, NC
Robins AFB, GA
Tobyhanna, PA.
Work Environment and Physical Demand:
Must be able to work for extended hours at a computer in an office environment as well as work from comm closets and warehouse spaces as needed.
The projected salary range for this position is $130,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.
