AWS Assessor

SkyePoint Decisions; Washington (District of Columbia); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Certification incentive program

PTO

Floating federal holidays

Health insurance options including HMO

High Deductible plans with HSA/FSAs

Full dental plans

Vision

ST/LT disability

Life insurance

401k matched

Job summary

SkyePoint Decisions is seeking an AWS Assessor to support the DoED CPSS program in Washington, DC. This is a remote role focused on cloud security assessments, CSPM tooling, and compliance reporting for federal systems.

You will drive security control testing, coordinate with stakeholders, and deliver clear findings to aid authorization decisions, with a focus on FedRAMP, RMF, and NIST guidance.

Qualifications

• Bachelor’s degree or equivalent and at least ten years related experience.
• At least five years as a Security Controls Assessor or similar audit role focused on cloud security.
• CISSP or equivalent certification is preferred.
• Experience with cloud security architecture, network security, IAM.
• Strong knowledge of risk assessment tools, technologies, and methods.
• Proven CSPM, security-as-code, and container security experience.
• AWS Cloud Practitioner or higher certification is expected.
• Familiarity with FedRAMP, RMF, FISMA, FIPS, NIST guidance and related policies.
• Ability to obtain DoED Level 6 High Risk/Public Trust clearance.
• Experience with security audits and compliance.

Responsibilities

• Implement security strategies for cloud environments (AWS/GCP/Azure).
• Conduct cloud security assessments to identify vulnerabilities and risks.
• Analyze CSPM findings and strengthen security controls.
• Prepare security compliance reports and SCT plans.
• Review cloud artifacts to support ATO requests.
• Summarize findings with detailed reports for risk owners.

Skills

Cloud security architecture

Network security

Identity and access management

Risk assessment tools

Security as code

Container security

Communication skills

Education

Bachelor’s degree or equivalent

CISSP certification or equivalent

Tools

CSPM tools

AWS Security Hub

FedRAMP/RMF tooling

Job description

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

This is a contingent position based upon customer approval.

SkyePoint Decisions is seeking an AWS Assessor to join our team supporting the Department of Education’s (DoED) Federal Student Aid (FSA) Cybersecurity and Privacy Support Services (CPSS) in Washington, DC.

This is a remote position.

Responsibilities:

• Implement security strategies tailored to our cloud-based environments (including but not limited to Amazon AWS, Google Cloud Platform, and Microsoft Azure).
• Conduct cloud security assessments to identify vulnerabilities and risks in the cloud infrastructure.
• Understanding of FedRAMP and FedRAMP assessment requirements.
• Analyze the organization's cloud security requirements and recommend improvements.
• Analyze vulnerabilities and risks from Cloud Security Posture Management (CSPM) tools to identify ineffective or missing security controls.
• Conduct comprehensive cloud assessment of implemented controls and control enhancements to determine the effectiveness of the controls, i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security and privacy requirements for the system and the organization.
• Prepare security compliance reports containing the results and findings from the cloud assessment.
• Complete and execute a cloud Security Controls Test (SCT) plan.
• Provide the final cloud analysis report and summarize the findings as well as detailed findings.
• Review and analyze cloud system artifacts for accuracy, completeness, in support of an authorization to operate (ATO) requests.

Required Qualifications:

• Must be able to obtain a DoED Level 6 High Risk/Public Trust Security Clearance
• Bachelor’s degree or equivalent and at least ten (10) years related experience.
• At least five (5) years of experience as a Security Controls Assessor or similar audit findings response role with a focus on cloud-based security.
• Senior industry professional certification such as CISSP or equivalent.
• Experience with Cloud security architecture, network security, identity, and access management.
• Solid knowledge of risk assessment tools, technologies, and methods.
• Proven experience with Cloud Security Posture Management (CSPM) tools, security as code methodologies, and container security.
• Excellent communications and interpersonal skills.
• Experience with security audits and compliance.
• AWS Certified Cloud Practitioner certification or higher.
• Good familiarity with and understanding of all relevant government and agency policies and procedures to ensure system documentation is compliance with relevant guidelines, e.g., FedRAMP, RMF, FISMA, FIPS-II, NIST, etc.

Preferred Qualifications:

• Top Secret clearance preferred.
• Experience with AWS Security Hub preferred.

Compensation:

Salary Range: TBD

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.

What We Can Offer You:

• At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.

SkyePoint Decisions is a participating E-Verify Employer.

U.S. Citizenship is required for most positions.

Equal Opportunity Employer/Veterans/Disabled.

CCPA Disclosure Notice Here