Cybersecurity Engineer - Cloud
Job Description
SAIC is hiring a Cloud Cybersecurity Engineer to support security, accreditation, and continuous monitoring for cloud environments across development, integration, testing, and operational activities.
Responsibilities
- Support security and accreditation efforts across cloud, hybrid-cloud, and multi-classification environments.
- Maintain RMF package artifacts, including SSPs, POA&Ms, security control implementations, assessment documentation, and accreditation evidence.
- Conduct Continuous Monitoring (ConMon) activities and help sustain cybersecurity posture across cloud environments.
- Perform vulnerability management: review, validate, track, and remediate findings from ACAS, Nessus, STIG, plus container and infrastructure findings.
- Implement and validate requirements aligned to JSIG, NIST SP 800-53, STIG, and program-specific cybersecurity expectations.
- Support security assessments, audits, inspections, and Security Control Assessor (SCA) activities.
- Validate security evidence for environment deployments, upgrades, and operational use.
- Review Infrastructure as Code (IaC) and Configuration as Code (CaC) implementations to confirm cybersecurity requirements are included.
- Support secure cloud architecture, multi-level security (MLS/MILS) environments, and Cross Domain Solution (CDS) integration efforts.
- Coordinate with Cloud, Infrastructure, DevSecOps, and Engineering teams to identify and mitigate cybersecurity risks.
- Support cloud ATO maintenance, reassessments, environment promotions, and cybersecurity reviews.
- Identify opportunities to improve cybersecurity automation, compliance monitoring, and overall security posture.
Requirements
- Education and experience:
- PhD and 4 years or more related experience
- OR Master’s and 7 years or more related experience
- OR Bachelor’s and 9 years or more related experience
- TS/SCI clearance and U.S. citizenship.
- DoD 8140 compliant cybersecurity certification (CISSP, CASP+, CCSP, Security+, or equivalent).
- Experience supporting RMF, ATO, SSP, POA&M, Continuous Monitoring (ConMon), and cybersecurity accreditation activities.
- Experience implementing and validating NIST SP 800-53, JSIG, STIG, and related DoD cybersecurity requirements.
- Experience performing vulnerability assessments and remediation using ACAS, Nessus, STIG Viewer, or similar tools.
- Cybersecurity-focused experience with cloud, virtualization, Kubernetes, containerized, or classified cloud environments.
Technologies
- RMF, SSPs, POA&Ms, Continuous Monitoring (ConMon)
- ACAS, Nessus, STIG, STIG Viewer
- JSIG, NIST SP 800-53
- Infrastructure as Code (IaC), Configuration as Code (CaC), Terraform, Ansible, Helm, RKE2
- Kubernetes, containerized environments
- MLS/MILS, Cross Domain Solution (CDS)
- DevSecOps, Zero Trust, PKI
- IaC, CaC, NIST 800-53
Location and Work Details
- Location: Chantilly, VA, US (hybrid)
- Travel: Yes (10% of the time)
- Potential for remote work: ORA_HYBRID
Compensation
- Salary range: USD 160,001 - 200,000 per yearly
Clearance
- Minimum clearance required: TS.SCI
- Clearance level must be able to obtain: None
Desired Qualifications and Experience
- Experience supporting classified cloud environments within DoD or Intelligence Community organizations.
- Experience supporting SC2S, GovCloud, Platform One, Azure Government, or similar government cloud environments.
- Experience supporting MLS/MILS architectures, Cross Domain Solutions (CDS), or multi-classification environments.
- Experience supporting cloud ATOs, reassessments, security audits, or SCA reviews.
- Experience reviewing Infrastructure as Code (Terraform, Ansible, Helm) from a cybersecurity perspective.
- Experience supporting Kubernetes, RKE2, containerized environments, or cloud-native platforms.
- Experience supporting DevSecOps, cloud security automation, or continuous authorization initiatives.
- Familiarity with Zero Trust architecture, PKI, identity management, and cloud security best practices.
- Experience supporting DoD command and control, battle management, air operations, space operations, or other mission systems.