Cloud Cybersecurity Engineer—RMF/JSIG Expert

Saic; California (MO); On-site; USD 160,000 - 200,000; Full time

Job summary

SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force. The Cybersecurity Engineer (Cloud) secures multi-tenant cloud environments, implements JSIG/NIST baselines, and develops RMF/ATO packages to support cloud deployments.

You will partner with DSOP, Platform, CE, and Cloud SMEs, validate security outputs, and provide evidence for security assertions to ensure mission readiness across Dev/Integration/Test environments.

Qualifications

• Bachelor's degree with 9+ years of experience in DoD cloud security.
• Experience securing multi-classification cloud environments.
• Hands-on STIG review and validating SAST/DAST outputs.
• Experience maintaining RMF/ATO artifacts (SSP, POA&M, continuous monitoring).
• Familiarity with Jira/Xacta workflows for RMF and vulnerability tracking.
• DoD 8140 aligned certifications: CISSP, CCSP, CASP+, or equivalent.

Responsibilities

• Build and secure multi-tenant cloud environments.
• Implement JSIG, NIST SP 800-53, STIG baselines across Dev/Integration/Test clouds.
• Own RMF/ATO packages for cloud environments, producing SSP and POA&M.
• Validate STIG, ACAS/Nessus, SAST/DAST outputs prior to environment promotion.
• Maintain cloud‑aligned continuous monitoring and security metrics.
• Support cloud security design efforts and integration into pipelines.
• Validate IaC/CaC baselines (Terraform, Ansible, Helm) for secure deployments.
• Provide cyber recommendations during CCB evaluations.

Skills

Cloud security

RMF/ATO

SAST/DAST

Jira/Xacta

IaC/CaC tooling

Education

Bachelor's degree

Master's degree

PhD or JD

Tools

Terraform

Ansible

Helm

Argo CD

Jira

Xacta

ACAS/Nessus

Job description

SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force. The Cybersecurity Engineer (Cloud) secures multi-tenant cloud environments, implements JSIG/NIST baselines, and develops RMF/ATO packages to support cloud deployments.

You will partner with DSOP, Platform, CE, and Cloud SMEs, validate security outputs, and provide evidence for security assertions to ensure mission readiness across Dev/Integration/Test environments.