Cloud Engineer

Leidos Inc; United States; Remote; USD 104,000 - 190,000; Full time

Job summary

A leading technology solutions provider is seeking an Information System Security Engineer to ensure secure cloud systems design and compliance with cybersecurity standards like NIST. The role requires strong expertise in information system security, cloud services, and federal compliance. Ideal candidates will have extensive experience in securing cloud-based systems and hold relevant certifications. This position offers a competitive salary range and the opportunity to work remotely.

Qualifications

• 8+ years in information system security, especially cloud systems.
• Experience in federal or FISMA Moderate/High environments.
• Ability to obtain Public Trust (U.S Citizenship Required).

Responsibilities

• Implement and maintain compliance with NIST RMF and FISMA High requirements.
• Support the Authorization to Operate (ATO) process.
• Conduct Security Impact Analyses for configuration changes.

Skills

Information System Security

Cloud Security

Compliance with NIST

Risk Management Framework (RMF)

Vulnerability Assessment

Education

Bachelor's degree in Computer Science or related field

Master's degree

Tools

NIST SP 800-53

FedRAMP

Job description

Overview

The NASA Advanced Enterprise Global Information Technology Solutions at Leidos currently has an opening for an Information System Security Engineer to work remotely. We are seeking a motivated and enthusiastic Information System Security Engineer (ISSE) to join our cloud services team. The ISSE will be responsible for the secure design, development, and implementation of cloud-based systems, ensuring compliance with relevant security standards and frameworks such as NIST, FedRAMP, RMF, and ISO 27001. The ideal candidate will work closely with cloud architects, developers, and system administrators to embed security throughout the system lifecycle.

This is an exciting opportunity to use your experience helping the AEGIS mission. In this mission you will work to review system controls, maintain system security packages, and assist with ensuring our environment remains secure and meets our organization's operational requirements.

Primary Responsibilities

• Implement and maintain compliance with the NIST Risk Management Framework (RMF) and FISMA High requirements for all cloud systems.
• Ensure that all cloud systems align with NASA NPR 2810, NIST SP 800-53, and other applicable federal cybersecurity policies and directives.
• Support the Authorization to Operate (ATO) process, maintaining continuous compliance and ensuring timely updates to security documentation.
• Oversee and enforce adherence to the shared responsibility model between the agency, cloud service providers, and system owners.
• Develop, maintain, and update system Security Authorization Packages, including the System Security Plan (SSP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and Continuous Monitoring (ConMon) documentation.
• Conduct Security Impact Analyses (SIA) for configuration changes, new deployments, or integrations within the cloud environment.
• Identify, assess, and document system vulnerabilities and risks, recommending mitigation strategies to maintain a compliant security posture.
• Prepare systems for internal and external audits, ensuring documentation and evidence are audit-ready.
• Coordinate with assessors and Authorizing Officials (AOs) during security control assessments (SCA) and ATO renewals.
• Track findings and corrective actions to closure, maintaining transparency through regular status reporting.

Basic Qualifications

• Bachelor's degree in Computer Science, Information Assurance, Cybersecurity, Engineering, or related technical field; Master's degree preferred.
• 8+ years of progressive experience in information system security, with at least 3 years focused on securing cloud-based systems and services.
• Demonstrated experience working in a federal or FISMA Moderate/High environment, including implementing NIST RMF and FedRAMP controls.
• Must be able to obtain Public Trust (U.S Citizenship Required).

Preferred Qualifications

• Must hold at least one DoD 8570.01-M IAT Level III or IAM Level III certification (e.g., CISSP, CISM, CASP+, or equivalent).
• Cloud security certifications such as CCSP, AWS Certified Security - Specialty, Microsoft Certified: Cybersecurity Architect Expert, or Google Professional Cloud Security Engineer are highly desirable.
• FedRAMP or NIST RMF practitioner certifications or training preferred.

Come break things (in a good way). Then build them smarter.

We're the tech company everyone calls when things get weird. We don't wear capes (they're a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for "how it's always been done."

Pay Range: $104,650.00 - $189,175.00

#Remote