Axyde Analytics seeks a senior cloud-security engineer to support the secure transition and operation of an AWS-based federal data and AI platform handling Controlled Unclassified Information, specialized nuclear-security information, and sensitive personally identifiable information.
Responsibilities- Translate FedRAMP, NIST SP 800-53 Revision 5, DOE, NNSA, CUI, privacy, and system-security requirements into implementable controls.
- Support development of the system security plan and activities necessary to request an IATO or ATO.
- Configure and monitor IAM, KMS, CloudTrail, CloudWatch, AWS Config, Security Hub, VPC, logging, encryption, and approved security services.
- Design integration with DOE OneID/SAML and Government SIEM capabilities, including Splunk where directed.
- Implement least privilege, role-based access, row/column controls, auditability, incident response, vulnerability management, and continuous monitoring.
- Maintain security artifacts, evidence, control mappings, POA&Ms, configuration baselines, and operational procedures.
- Review proposed architecture changes for authorization-boundary and security consequences.
- Support production and test environments, release management, backup, recovery, availability, and operational monitoring.
- Train delivery personnel on applicable handling and security obligations.
Required Experience- Five or more years securing AWS systems in federal or highly regulated environments.
- Experience supporting federal ATO or IATO packages.
- Working knowledge of FedRAMP Moderate, NIST SP 800-53 Revision 5, CUI, incident response, continuous monitoring, and AWS shared responsibility.
- Hands-on experience with AWS identity, encryption, logging, monitoring, networking, and security-posture services.
- Experience with SIEM integration and security evidence production.
- Strong technical writing and audit-support skills.
Personnel RequirementsU.S. citizenship is required. No current DOE/NNSA clearance is required, but the candidate must be capable of obtaining a DOE/NNSA Q clearance if required. Experience handling CUI, UCNI, or similarly restricted information is strongly preferred.
EngagementRemote within the United States with occasional travel. Proposal-stage advisory work may begin immediately. Transition and operations work is contingent upon contract award.
