Cloud Computing Specialist - Subject Matter Expert provides specialized cloud cybersecurity, risk management, and information assurance expertise supporting a DoD agency's enterprise cloud and WAN integration and modernization initiatives. Ensures solutions and connected infrastructure satisfy DoD security requirements, Risk Management Framework standards, and applicable cloud accreditation requirements.
Responsibilities Include: - Provide cloud computing and network security expertise supporting classified and unclassified enterprise environments.
- Evaluate cloud and WAN architectures, security controls, and risks associated with enterprise cloud migrations.
- Support implementation of NIST Risk Management Framework requirements, including NIST SP 800-37 and SP 800-53.
- Conduct cloud security assessments, C&A/A&A reviews, and security control evaluations.
- Evaluate cloud environments against FedRAMP security and privacy control requirements.
- Assess cloud security across architecture, data protection, infrastructure, applications, operations, and compliance domains.
- Identify cybersecurity vulnerabilities, security control deficiencies, and implementation risks.
- Develop security recommendations, mitigation strategies, and corrective action plans.
- Support cloud connectivity and integration with AWS, Microsoft Azure, GCP, and other Government-authorized cloud environments.
- Review cloud migration plans for compliance with DoD information assurance requirements.
- Support security engineering activities involving Secure Cloud Computing Architecture and cloud access infrastructure.
- Develop and review RMF documentation, security assessment artifacts, and authorization support materials.
- Coordinate with Government cybersecurity personnel, engineers, and cloud service providers.
- Support security requirements for environments handling information at different classification and impact levels.
- Provide expert guidance concerning cloud security best practices and emerging cloud cybersecurity technologies.
Required Skills, Qualifications and Experience:- Experience:
- Five years of relevant DoD RMF A&A/C&A experience.
- Experience applying RMF and NIST C&A requirements.
- Department of War information assurance experience.
- Experience assessing information assurance controls and conducting C&A reviews for large, complex information systems.
- Well-versed in FedRAMP assessment methodology of security and privacy controls deployed in cloud information systems to include six (6) domain areas: Architectural Concepts & Design Requirements, Cloud Data Security, Cloud Platform & Infrastructure Security, Cloud Application Security, Operations, and Legal & Compliance.
- Education:
- Citizenship and Clearance:
- US Citizenship is required.
- DoD Secret clearance with Tier 3/NACLC/ANACI investigation.
- Certification:
- DoD 8570/8140: IAM Level III baseline certification (CISSP, CISM, or GSLC).
- Cloud Computing Security Certification.
- Location:
- Work will be primarily performed from a contractor-owned facility near Fort Belvoir, VA and customer locations. Candidates may work onsite/reside within commuting distance of one of the following:
- Fort Belvoir, VA (highly preferred)
- Battle Creek, MI
- Columbus, OH
- Dayton, OH
- New Cumberland, PA
- Ogden, UT
- Philadelphia, PA
- Richmond, VA
- Anniston, AL
- San Diego, CA
- Fort Bragg, NC
- Robins AFB, GA
- Tobyhanna, PA.
Work Environment and Physical Demand:- Must be able to work for extended hours at a computer in an office environment as well as work from comm closets and warehouse spaces as needed.
The projected salary range for this position is $130,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.
