Cloud Computing Specialist - Subject Matter Expert

The Cloud Computing Specialist - Subject Matter Expert provides specialized cloud cybersecurity, risk management, and information assurance expertise supporting a DoD agency's enterprise cloud and WAN integration and modernization initiatives. Ensures solutions and connected infrastructure satisfy DoD security requirements, Risk Management Framework standards, and applicable cloud accreditation requirements.

• →Provide cloud computing and network security expertise supporting classified and unclassified enterprise environments.
• →Evaluate cloud and WAN architectures, security controls, and risks associated with enterprise cloud migrations.
• →Support implementation of NIST Risk Management Framework requirements, including NIST SP 800-37 and SP 800-53.
• →Conduct cloud security assessments, C&A/A&A reviews, and security control evaluations.
• →Evaluate cloud environments against FedRAMP security and privacy control requirements.
• →Assess cloud security across architecture, data protection, infrastructure, applications, operations, and compliance domains.
• →Identify cybersecurity vulnerabilities, security control deficiencies, and implementation risks.
• →Develop security recommendations, mitigation strategies, and corrective action plans.
• →Support cloud connectivity and integration with AWS, Microsoft Azure, GCP, and other Government-authorized cloud environments.
• →Review cloud migration plans for compliance with DoD information assurance requirements.
• →Support security engineering activities involving Secure Cloud Computing Architecture and cloud access infrastructure.
• →Develop and review RMF documentation, security assessment artifacts, and authorization support materials.
• →Coordinate with Government cybersecurity personnel, engineers, and cloud service providers.
• →Support security requirements for environments handling information at different classification and impact levels.
• →Provide expert guidance concerning cloud security best practices and emerging cloud cybersecurity technologies.

• Experience:
  • Five years of relevant DoD RMF A&A/C&A experience.
  • Experience applying RMF and NIST C&A requirements.
  • Department of War information assurance experience.
  • Experience assessing information assurance controls and conducting C&A reviews for large, complex information systems.
  • Well-versed in FedRAMP assessment methodology of security and privacy controls deployed in cloud information systems to include six (6) domain areas: Architectural Concepts & Design Requirements, Cloud Data Security, Cloud Platform & Infrastructure Security, Cloud Application Security, Operations, and Legal & Compliance.
• Education:
  • High School Diploma.
• Citizenship and Clearance:
  • US Citizenship is required.
  • DoD Secret clearance with Tier 3/NACLC/ANACI investigation.
• Certification:
  • DoD 8570/8140: IAM Level III baseline certification (CISSP, CISM, or GSLC).
  • Cloud Computing Security Certification.
• Location: 
  • Work will be primarily performed from a contractor-owned facility near Fort Belvoir, VA and customer locations. Candidates may work onsite/reside within commuting distance of one of the following:
    • Fort Belvoir, VA (highly preferred)
    • Battle Creek, MI
    • Columbus, OH
    • Dayton, OH
    • New Cumberland, PA
    • Ogden, UT
    • Philadelphia, PA
    • Richmond, VA
    • Anniston, AL
    • San Diego, CA
    • Fort Bragg, NC
    • Robins AFB, GA
    • Tobyhanna, PA.

• Must be able to work for extended hours at a computer in an office environment as well as work from comm closets and warehouse spaces as needed.

The projected salary range for this position is $130,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.