Cloud and RMF Cyber Lead

Science Applications International Corp.; Alexandria (VA); On-site; USD 160,000 - 200,000; Full time

Job summary

SAIC is seeking a Cyber Lead to provide technical leadership for secure cloud and on-prem environments, with a focus on Microsoft Azure and DoD missions. This role combines hands-on cyber engineering, RMF/ATO leadership, and direct engagement with senior stakeholders.

The position will be onsite at the Mark Center in Alexandria, VA. You will guide a small team, drive security strategy and execution, present status and risks to government customers, and mentor staff on RMF, tooling, and cloud

Qualifications

• At least 14 years in cybersecurity hands-on work.
• Experience leading cyber or cloud security efforts and small teams.
• Excellent customer-facing communication with government stakeholders.
• Deep DoD/Federal cybersecurity policy and RMF knowledge.
• Azure security experience, including Defender for Cloud and Sentinel.
• Strong written and verbal communication and briefing materials.

Responsibilities

• Serve as the primary cyber point of contact for the customer, providing clear, confident, and professional communication in meetings, briefings, and working sessions.
• Lead a cybersecurity team responsible for RMF, ATO packages, POA&M management, and continuous monitoring for on-prem and cloud-hosted systems.
• Design, implement, and maintain secure cloud architectures in Microsoft Azure, with emphasis on DoD IL4/5/6 environments and related security/compliance requirements.
• Lead or support the design and implementation of Zero Trust-aligned solutions, including identity-centric security, network segmentation, data protection, and continuous monitoring.
• Oversee integration and operation of cybersecurity toolsets across cloud and on-prem environments (e.g., SIEM, EDR, CSPM/CIEM, vulnerability management, logging/monitoring, SOAR).
• Ensure high-quality RMF and ATO documentation (SSPs, SARs, PCIAs, etc.) and strong POA&M lifecycle management to support timely authorization and sustainment.

Skills

Cybersecurity leadership

RMF/ATO leadership

DoD policy knowledge

Customer-facing

Cloud security (Azure)

Zero Trust concepts

Security architecture

Education

Bachelor's degree

Master's degree

PhD or JD

Tools

SIEM

EDR

CSPM/CIEM

POA&M management

SOAR

Job description

Description

SAIC is seeking a Cyber Lead to provide technical leadership and customer-facing support for secure cloud and on-prem environments, with a focus on Microsoft Azure and DoD missions. This role combines hands-on cyber engineering, RMF/ATO leadership, and direct engagement with senior stakeholders. The Cyber Lead will guide a small team, drive security strategy and execution, and present status, risks, and recommendations to our government customers.

This position will be onsite at the Mark Center in Alexandria, Virginia.

Key Responsibilities:

• Serve as the primary cyber point of contact for the customer, providing clear, confident, and professional communication in meetings, briefings, and working sessions.
• Lead a cybersecurity team responsible for RMF, ATO packages, POA&M management, and continuous monitoring for on-prem and cloud-hosted systems.
• Design, implement, and maintain secure cloud architectures in Microsoft Azure, with emphasis on DoD IL4/5/6 environments and related security/compliance requirements.
• Lead or support the design and implementation of Zero Trust-aligned solutions, including identity-centric security, network segmentation, data protection, and continuous monitoring.
• Oversee integration and operation of cybersecurity toolsets across cloud and on-prem environments (e.g., SIEM, EDR, CSPM/CIEM, vulnerability management, logging/monitoring, SOAR).
• Ensure high-quality RMF and ATO documentation (SSPs, SARs, PCIAs, etc.) and strong POA&M lifecycle management to support timely authorization and sustainment.
• Guide the development and execution of a cloud/cybersecurity roadmap to mature security posture over time.
• Provide technical direction and mentoring to team members on policies, RMF, monitoring tools, and cloud security best practices.
• Support and lead customer presentations and briefings on security status, risks, mitigations, and recommendations, tailoring content for both technical and non-technical audiences.
• Coordinate with architecture, operations, and DevSecOps teams to ensure security-by-design and consistent implementation of standards and reference architectures.

Qualifications

Required Education:

• Bachelors and fourteen (14) years or more experience; Masters and twelve (12) years or more experience; PhD or JD and nine (9) years or more experience.

Required Qualifications:

• Minimum 14 years of hands-on cybersecurity experience.
• Demonstrated experience leading cyber or cloud security efforts and/or small technical teams.
• Strong customer-facing skills, including:
• Experience presenting to government stakeholders and senior leadership.
• Ability to clearly communicate complex security topics and trade-offs.
• Deep understanding of DoD/Federal cybersecurity policy and RMF (NIST 800-53, DoD RMF); proven experience supporting or leading ATO efforts and managing POA&Ms.
• Experience with cloud security, particularly Microsoft Azure, including:
• Azure security and monitoring tools (e.g., Microsoft Defender for Cloud, Microsoft Sentinel, Defender for Endpoint).
• Azure networking, identity (Azure AD / Entra ID), policies, and logging/monitoring.
• Hands-on experience with multiple cybersecurity tools such as SIEM, EDR, vulnerability management, and other monitoring platforms.
• Familiarity with Zero Trust principles and reference architectures.
• Strong written and verbal communication skills, including briefing materials and technical documentation.
• Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday-Friday.

Clearance:

• Active DoD Secret security clearance.

Target salary range: $160,001 - $200,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.