Cloud Computing Specialist (CCS) - Subject Matter Expert (SME)

Diné Development Corporation; Virginia; On-site; USD 116,000 - 136,000; Full time

Benefits offered by this job

Medical Insurance

Dental Coverage

Vision Coverage

Life Insurance

Disability Coverage

401(k) match

Paid Time Off

Tuition Reimbursement

Job summary

Diné Development Corporation (DDC) is seeking a Cloud Computing Specialist (CCS) – Subject Matter Expert (SME) to lead IA and cloud security across DoD cloud environments. You will assess controls, apply RMF/NIST, and use FedRAMP methodologies to support authorization and ongoing compliance.

This senior role requires independent work and strong DoD experience. The position is contingent on contract award, with a salary range of $116,000 to $136,000 and a comprehensive benefits package.

Qualifications

• 5+ years C&A experience; RMF/NIST C&A; DoW IA; IA control assessment and C&A reviews for large, complex information systems.
• Secret clearance; Moderate Risk, Confidential, Non-Critical Sensitive / Tier 3 (T3)/NACLC/ANACI investigation at proposal submission.
• 8570/8140: IAM Level III – CISSP, CISM, or CCISO.
• Demonstrated RMF and NIST C&A requirements.
• DoD/DoW IA experience and strong RMF/NIST C&A knowledge.
• FedRAMP understanding and cloud security controls.
• Cloud security expertise across architecture, data, platform/infrastructure, and operations.

Responsibilities

• Serve as SME for cloud security, IA, and C&A/RMF activities supporting IOEE/IOSEE.
• Assess cloud environments and security controls against RMF, NIST SP 800-53/800-37, and DoD requirements.
• Apply FedRAMP methodologies to evaluate security and privacy controls in cloud systems.
• Identify and manage cloud security risks and support remediation.
• Evaluate security across cloud architecture, data, and operations.
• Conduct IA control assessments and C&A reviews for large systems.
• Recommend cloud security best practices across models.
• Provide guidance on cloud security, compliance, and risk to engineering and stakeholders.
• Develop security documentation for assessment, authorization, and ongoing compliance.

Skills

Cloud security expertise

RMF/C&A

NIST SP 800-53/800-37

DoD Information Assurance

Independent work

Risk management

Education

IAM Level III – CISSP/CISM/CCISO

Tools

AWS security

Azure security

eMASS

Job description

The Cloud Computing Specialist (CCS) – Subject Matter Expert (SME) serves as a senior Information Assurance and cloud security expert responsible for assessing and managing cybersecurity risk across cloud environments supporting the IOEE/IOSEE mission. The CCS applies deep expertise in Certification and Accreditation (C&A), the NIST Risk Management Framework (RMF), and NIST SP 800-53 and 800-37 to evaluate security and privacy controls, identify and resolve cloud security risks, and support compliant implementation of cloud technologies. The role provides expertise across cloud architecture and design, data security, platform and infrastructure security, application security, operations, and legal/compliance considerations, applying FedRAMP assessment methodologies and cloud security best practices across deployment and service models. The CCS operates independently and supports the assessment and authorization of large, complex DoD information systems.

***This position is contingent upon contract award.***

Responsibilities:

• Serve as the subject matter expert for cloud security, Information Assurance, and C&A/RMF activities supporting IOEE/IOSEE.
• Assess cloud environments and security controls against NIST RMF, NIST SP 800-53, NIST SP 800-37, and applicable DoD requirements.
• Apply FedRAMP assessment methodologies to evaluate security and privacy controls within cloud information systems.
• Identify, assess, manage, and support resolution of cloud computing security risks.
• Evaluate security considerations across cloud architecture and design, data, platforms and infrastructure, applications, and operations.
• Conduct IA control assessments and C&A reviews for large, complex information systems.
• Recommend and apply cloud security best practices across applicable cloud deployment and service models.
• Provide independent technical guidance on cloud security, compliance, and risk management to engineering and program stakeholders.
• Develop and support security documentation and evidence required for assessment, authorization, and ongoing compliance activities.

Qualifications:

• Years of Experience: Five (5) years relevant C&A experience; RMF/NIST C&A; DoW IA; IA control assessment and C&A reviews for large, complex information systems
• Clearance Requirements: Secret ; Moderate Risk, Confidential, Non-Critical Sensitive / Tier 3 (T3)/NACLC/ANACI investigation required at proposal submission
• Certification Requirements:
  • 8570/8140: IAM Level III – CISSP, CISM, or CCISO
• Any other work-related qualifications needed for the role:
  • Demonstrated experience with the Risk Management Framework (RMF) and NIST C&A requirements.
  • Demonstrated DoD/DoW Information Assurance (IA) experience.
  • Experience assessing IA/security controls and conducting C&A reviews for large, complex information systems.
  • Strong working knowledge of NIST SP 800-53 and NIST SP 800-37 and their application to cloud environments.
  • Knowledge of FedRAMP assessment methodology and cloud security/privacy controls.
  • Demonstrated cloud security expertise spanning architecture and design, data security, platform/infrastructure security, application security, operations, and compliance.
  • Ability to work independently and identify, manage, and resolve complex cloud computing security risks.

• Desired/Preferred:
  • DoD cloud environments
  • FedRAMP-authorized cloud services
  • eMASS/RMF documentation
  • Cloud ATO activities
  • AWS or Azure security

Salary Range: $116,000 to $136,000

The compensation range listed for this position represents the good faith salary range Diné Development Corporation (DDC) and its subsidiaries reasonably expect to pay for the role, in accordance with applicable state and local pay transparency laws. Actual compensation will be determined based on a variety of factors, including the position's responsibilities, the candidate's education, experience, skills, internal equity, market considerations, and any applicable collective bargaining agreements or legal requirements.

About Us

Diné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.

Benefits

Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.

Equal Opportunity & Compliance Statement

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.

We participate in E-Verify.

DDC is committed to providing equal employment opportunities to all applicants and employees. If you require a reasonable accommodation to participate in the application or interview process, please contact Recruiting for assistance