Cloud Security Engineer 2

RPMGlobal; Bethesda (MD); Hybrid; USD 110,000 - 180,000; Full time

Job summary

RPMGlobal is seeking a Cloud Security Engineer 2 to secure, harden, and maintain compliance of cloud platforms across secure networks supporting OSINT-focused mission systems. The role emphasizes protecting cloud-native environments and implementing robust security controls.

You will configure AWS services, secure Kubernetes deployments, and integrate security into CI/CD pipelines while aligning with RMF, NIST, CNSSI 1253, and ICD 503 requirements. A TS/SCI with CI Poly is required.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree or equivalent with minimum 3 years of experience in the field; 2 additional years may substitute for degree.
• At least one DoD 8570.01-M IAT Level II or higher certification.
• 1+ years working in the cloud; securely configuring and deploying AWS services.
• Demonstrated experience securing Kubernetes platforms and integrating security into CI/CD pipelines and containers; understand microservices and service mesh.
• Experience with RMF, vulnerability management, and cloud compliance/security best practices.

Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.
• Perform security assessments, vulnerability management, and risk analysis for cloud-based systems across secure enclaves.
• Implement and manage security controls for Kubernetes clusters and containerized applications.
• Integrate security measures into CI/CD pipelines and DevSecOps processes.
• Develop and maintain ATO packages and support compliance with standards including NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and ICD 503.
• Collaborate with compliance personnel, engineers, architects, and Government counterparts to ensure regulatory compliance.

Skills

Cloud security

Kubernetes security

CI/CD security

Vulnerability management

RMF compliance

NIST standards

DevSecOps

Education

Bachelor's degree or equivalent

Associates Degree

Master's Degree

PhD

High School Diploma/GED

Tools

Splunk

Nessus

SonarQube

Prisma Cloud

DAST

SAST

Kubernetes

AWS

Job description

Position Summary

Support the DOMEX Technology Platform as a Cloud Security Engineer 2 responsible for securing, hardening, and maintaining compliance of cloud-based platforms across multiple secure networks in support of OSINT-focused mission systems.

Essential Duties and Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.


• Perform security assessments, vulnerability management, and risk analysis for cloud-based systems across secure enclaves.


• Implement and manage security controls for Kubernetes clusters and containerized applications.


• Integrate security measures into CI/CD pipelines and DevSecOps processes.


• Develop and maintain ATO packages and support compliance with standards including NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and ICD 503.


• Collaborate with compliance personnel, engineers, architects, and Government counterparts to ensure regulatory compliance.

Required Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.


• Bachelor's degree or equivalent with a minimum of three years of experience in the category field. Two additional years of experience may be substituted for a bachelor's degree.


• At least one DoD 8570.01-M IAT Level II or higher certification.


• 1+ years working in the cloud, securely configuring and deploying AWS services.


• Demonstrated experience securing Kubernetes platforms and integrating security into CI/CD pipelines and containers; must understand microservices architecture and service mesh.


• Experience with RMF, vulnerability management, and cloud compliance/security best practices.

Preferred Qualifications

• Multiple IAT/IAM II or III advanced certifications such as CISSP-ISSAP/ISSEP, CISM, CCSP, or SecurityX/CASP+ CE.


• AWS Solutions Architect or AWS Security Specialty certifications.


• Kubernetes certifications such as KCNA, CKA, or CKS.


• Linux administration experience and certifications such as Linux+ or Red Hat certifications including RHCSA or RHCE.


• Experience with security tools such as Splunk, Nessus, SonarQube, Prisma Cloud, DAST, and SAST tools.


• Experience applying Zero Trust framework to secure systems.


• Prior network engineering experience.


• Experience applying security controls to Generative AI implementations.

Required Education and Experience Equivalency

• High School Diploma/GED with 5 years of experience.


• Associates Degree with 5 years of experience.


• Bachelors' Degree with 3 years of experience.


• Masters' Degree with 3 years of experience.


• PhD with 3 years of experience.

RequiredCertifications

• At least one DoD 8570.01-M IAT Level II or higher certification.

Required Security Clearance

• Active TS/SCI with ability to obtain a CI Polygraph.