Cloud Cybersecurity SME — DoD Compliance & ATOs

Electrosoft; Richmond, Columbus (VA, OH); On-site; USD 120,000 - 125,000; Full time

Job summary

Electrosoft is seeking a Cybersecurity Cloud Subject Matter Expert to ensure the architecture and design of cloud-hosted IT systems are secure and compliant with DoD requirements.

You will review cloud security policies, advise on risk posture, and support deployment programs by applying current cloud security engineering practices across OCI, AWS, Azure, and GCP. This role requires translating complex controls into actionable guidance for development teams to achieve successful ATO outcomes.

Qualifications

• Two years of experience achieving ATOs in a cloud environment (OCI, AWS, Azure, GCP).
• Five years of achieving ATOs for compartment DoD IT systems.
• Must possess IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) at time of proposal submission

Responsibilities

• Ensures the architecture and design of cloud-hosted IT systems are secure and meet DOD requirements.
• Reviews Cloud security policy and provides recommendations for improvement to enhance the security posture within the cloud as well as the ability to meet protection, detection, monitoring and response requirements for systems and data.
• Applies knowledge of current advances in cloud security engineering and cloud security threats to provide support for the deployment of programs and applications.
• Provides input to programs throughout the process of deployment to ensure systems meet DOD compliance requirements. Provides guidance to assessment staff in the performance of Cybersecurity Vulnerability Assessments as related to cloud hosting environments.

Skills

Cloud security

ATO experience

DoD cybersecurity

Tools

OCI

AWS

Azure

GCP

Job description

Electrosoft is seeking a Cybersecurity Cloud Subject Matter Expert to ensure the architecture and design of cloud-hosted IT systems are secure and compliant with DoD requirements.

You will review cloud security policies, advise on risk posture, and support deployment programs by applying current cloud security engineering practices across OCI, AWS, Azure, and GCP. This role requires translating complex controls into actionable guidance for development teams to achieve successful ATO outcomes.