Cloud Information Systems Security Engineer

Louisiana Technology Group Inc; United States; On-site; USD 110,000 - 170,000; Full time

Job summary

Louisiana Technology Group Inc. is seeking a Cloud Information Systems Security Engineer (ISSE) to design secure AWS architectures and manage RMF compliance across the cloud lifecycle.

You will work with engineers and analysts to support authorizations and strengthen defenses in a dynamic cloud environment. The role requires 4+ years in cybersecurity with cloud focus, DoD 8570 IAM Level II certification, and hands-on experience with eMASS, SSPs, SARs, and POAMs.

Qualifications

• Active SECRET security clearance is required.
• DoD 8570 IAM Level II certification (e.g., CISSP, CAP, or Security+ CE).
• Minimum of 4 years of cybersecurity experience, with 2+ years in cloud security (AWS preferred).
• Expertise with RMF, eMASS artifact development, and NIST 800-53 control assessments.
• Proficiency with AWS security tools (Security Hub, GuardDuty, CloudWatch, CloudTrail) and Splunk.
• Experience with ACAS scanning, STIG compliance, and vulnerability management tools.

Responsibilities

• Design and maintain cybersecurity architecture for AWS cloud environments, ensuring alignment with RMF and federal standards.
• Lead the development and upkeep of authorization artifacts (SSPs, SARs, POAMs) within eMASS.
• Conduct security assessments, vulnerability scans, and testing using ACAS, STIGs, and AWS-native security services.
• Manage Authorization to Operate (ATO) processes across IaaS, PaaS, and SaaS.
• Collaborate with cloud engineers to integrate secure IaC and DevSecOps practices.
• Utilize AWS Security Hub, GuardDuty, CloudWatch, CloudTrail, and Splunk for monitoring and incident response.
• Provide guidance on interpreting ACAS/STIG results and ensuring baselines compliance.
• Support audits, inspections, and risk assessments with documentation and remediation strategies.
• Continuously improve cybersecurity processes and tools to maintain audit readiness.

Skills

SECRET clearance

IAM Level II

Cloud security

RMF/NIST 800-53

DevSecOps

Tools

ACAS

STIGs

AWS Security Hub

GuardDuty

CloudWatch

CloudTrail

Splunk

Terraform

Bicep

eMASS

Trellix

Invicti

Anchore

Job description

Position Overview

LATG is seeking a Cloud Information Systems Security Engineer (ISSE) to join our AWS-based cloud operations team. This role will focus on developing and maintaining secure cloud architectures, ensuring compliance with Federal Government standards, and managing risk across the cloud system lifecycle. The Cloud ISSE will work closely with engineers and analysts to support authorizations, strengthen defenses, and streamline cybersecurity processes in a dynamic cloud environment.

Key Responsibilities

• Design and maintain cybersecurity architecture for AWS cloud environments, ensuring alignment with Federal Government standards and the Risk Management Framework (RMF).
• Lead the development and upkeep of authorization artifacts, including System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action and Milestones (POAMs), within eMASS.
• Conduct security assessments, vulnerability scans, and technical testing using tools such as ACAS, STIGs, and AWS-native security services.
• Manage Authorization to Operate (ATO) processes and compliance activities across IaaS, PaaS, and SaaS models.
• Collaborate with cloud engineering teams to integrate secure Infrastructure-as-Code (IaC) and DevSecOps practices.
• Utilize AWS Security Hub, GuardDuty, CloudWatch, CloudTrail, and Splunk for monitoring, log analysis, and incident response.
• Provide technical guidance on interpreting ACAS/STIG results and ensure compliance with security baselines.
• Support audits, inspections, and risk assessments by delivering documentation and remediation strategies.
• Continuously improve cybersecurity processes, tools, and documentation to maintain audit readiness and enhance security posture.

Required Qualifications

• Active SECRET Security Clearance.
• DoD 8570 IAM Level II certification (e.g., CISSP, CAP, or Security+ CE).
• Minimum of 4 years of cybersecurity experience, with 2+ years in cloud security (AWS preferred).
• Expertise in RMF, eMASS artifact development, and NIST 800-53 control assessments.
• Proficiency with AWS cloud security tools (Security Hub, GuardDuty, CloudWatch, CloudTrail) and Splunk.
• Experience with ACAS scanning, STIG compliance, and vulnerability management tools (Trellix, Invicti, Anchore).
• Familiarity with Infrastructure-as-Code (Terraform, Bicep) and DevSecOps integration.
• Strong communication, problem-solving, and documentation skills.