Cloud Compliance Specialist — RMF / ATO / Cybersecurity

Unified Business Technologies, Inc.; Maryland; On-site; USD 90,000 - 130,000; Full time

Job summary

Unified Business Technologies, Inc. is seeking a Cloud Compliance Specialist to support cybersecurity compliance, RMF activities, and ATO requirements for Army cloud systems. You will lead compliance documentation, coordinate continuous monitoring, and support secure, audit-ready cloud environments.

The role requires experience with SSPs, POA&Ms, vulnerability management, and RMF processes. Collaboration with system owners, cloud engineers, and government personnel is essential.

Qualifications

• Approximately 4+ years of cybersecurity compliance, RMF, or ISSO-related experience.
• Direct experience preparing or maintaining ATO documentation.
• Working knowledge of RMF processes and NIST security controls.
• Experience with System Security Plans, POA&Ms, vulnerability management, and continuous monitoring.
• Ability to analyze security scan results and coordinate remediation.
• Familiarity with AWS, Azure, or comparable cloud security environments.
• Strong written documentation, auditing, and technical communication skills.

Responsibilities

• Develop, review, update, and maintain cybersecurity compliance documentation supporting cloud-based systems.
• Prepare and maintain System Security Plans (SSPs), compliance artifacts, and supporting ATO documentation.
• Coordinate continuous monitoring activities across approved cloud environments.
• Review automated vulnerability scans, security findings, and configuration drift reports.
• Identify noncompliant cloud resources and coordinate remediation activities.
• Track corrective actions and verify the implementation of required security measures.
• Develop and maintain Plans of Action and Milestones (POA&Ms).
• Conduct formal cloud architecture risk assessments.
• Interpret and apply applicable cybersecurity control requirements.
• Support RMF change control activities and compliance reporting.
• Evaluate the security implications of system changes, new cloud services, and updated operational practices.
• Coordinate with system owners, cloud engineers, cybersecurity specialists, and government personnel.
• Maintain documentation and evidence supporting audits and ongoing cloud accreditation.

Skills

RMF processes

Cybersecurity compliance

Cloud security

Documentation & reporting

Vulnerability management

Stakeholder coordination

NIST controls

Audit preparation

Tools

eMASS

DISA STIGs

ACAS

Nessus

AWS

Azure

Job description

Description

We are seeking a Cloud Compliance Specialist to support cybersecurity compliance, Risk Management Framework (RMF) activities, and Authorization to Operate (ATO) requirements for Army cloud systems.

This professional will lead compliance documentation activities, coordinate continuous monitoring, conduct risk assessments, and support the maintenance of secure, audit-ready cloud environments.

Key Responsibilities

• Develop, review, update, and maintain cybersecurity compliance documentation supporting cloud-based systems.
• Prepare and maintain System Security Plans (SSPs), compliance artifacts, and supporting ATO documentation.
• Coordinate continuous monitoring activities across approved cloud environments.
• Review automated vulnerability scans, security findings, and configuration drift reports.
• Identify noncompliant cloud resources and coordinate remediation activities.
• Track corrective actions and verify the implementation of required security measures.
• Develop and maintain Plans of Action and Milestones (POA&Ms).
• Conduct formal cloud architecture risk assessments.
• Interpret and apply applicable cybersecurity control requirements.
• Support RMF change control activities and compliance reporting.
• Evaluate the security implications of system changes, new cloud services, and updated operational practices.
• Coordinate with system owners, cloud engineers, cybersecurity specialists, and government personnel.
• Maintain documentation and evidence supporting audits and ongoing cloud accreditation.

Requirements

• Approximately 4+ years of cybersecurity compliance, information assurance, RMF, or ISSO-related experience.
• Direct experience preparing or maintaining ATO documentation.
• Working knowledge of RMF processes and NIST security controls.
• Experience with System Security Plans, POA&Ms, vulnerability management, and continuous monitoring.
• Ability to analyze security scan results and coordinate remediation.
• Familiarity with AWS, Azure, or comparable cloud security environments.
• Strong written documentation, auditing, and technical communication skills.

Preferred Qualifications

• Experience with eMASS, DISA STIGs, ACAS, Nessus, or comparable tools.
• Experience supporting cloud systems within Army or other federal environments.
• Security+, CySA+, CISSP, CISM, or equivalent professional certification.
• Familiarity with NIST SP 800-53, NIST SP 800-37, and federal cloud authorization activities.
• Previous experience as an ISSO, RMF Analyst, ATO Specialist, or Information Assurance Engineer.

Security: T-3 required under the PWS.