Cloud Information Assurance Lead — RMF/DevSecOps

Booz Allen Hamilton; Mechanicsburg (Cumberland County); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an Information Assurance Specialist to secure systems across the full lifecycle, including traditional and cloud-native architectures (AWS and approved SaaS). You will operationalize RMF/CSRMC in a DevSecOps environment, automate control implementation and evidence collection, and contribute to A&A, Assess-Only, and cATO processes.

Join Booz Allen and lead technical incident response for cloud-native systems, coordinate with SaaS providers during third-party

Qualifications

• 5+ years of experience with Information Assurance.
• 3+ years of experience directly performing Information Assurance tasks.
• Knowledge of the DoD cybersecurity environment.
• Secret clearance.
• Bachelor’s degree in an IT, Computer Science, or Engineering field.
• DoD 8570/8140 IAM Level II or IAT Level II baseline certification such as CISSP, Security+ CE, CISM, or CASP+ CE.

Responsibilities

• Lead the operationalization of RMF/ CSRMC in a DevSecOps environment.
• Automate control implementation and evidence collection to achieve and sustain A&A, Assess‑Only, and cATO accreditations.
• Design and execute transparent Security Assessment Plans and analyze posture using automated scans and CaC outputs.
• Lead technical incident response for cloud-native systems and coordinate with SaaS providers during third‑party incidents.

Skills

Information Assurance

DoD cybersecurity

Secret clearance

Education

Bachelor's degree in IT/CS/Engineering

Job description

Booz Allen Hamilton is seeking an Information Assurance Specialist to secure systems across the full lifecycle, including traditional and cloud-native architectures (AWS and approved SaaS). You will operationalize RMF/CSRMC in a DevSecOps environment, automate control implementation and evidence collection, and contribute to A&A, Assess-Only, and cATO processes.

Join Booz Allen and lead technical incident response for cloud-native systems, coordinate with SaaS providers during third-party