Cloud Security Engineer 3

RPMGlobal; Bethesda, Northern (MD, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

RPMGlobal is seeking a Cloud Security Engineer 3 to secure, harden, and maintain compliance for cloud platforms across secure networks supporting OSINT-focused mission systems.

The role requires active TS/SCI with CI Polygraph eligibility, DoD 8570.01-M IAT Level II or higher, and deep experience in AWS, Kubernetes security, and DevSecOps practices. Collaboration with government counterparts is essential to ensure regulatory compliance.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree or equivalent with minimum six years in the field; three extra years can substitute for a degree.
• At least one DoD 8570.01-M IAT Level II or higher certification.
• 2+ years in cloud environments (AWS) and secure deployments.
• Experience securing Kubernetes platforms and integrating security into CI/CD and containers.

Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.
• Perform security assessments, vulnerability management, and risk analysis for cloud-based systems across secure enclaves.
• Implement and manage security controls for Kubernetes clusters and containerized applications.
• Integrate security measures into CI/CD pipelines and DevSecOps processes.
• Develop and maintain ATO packages and support compliance with NIST SP 800-37, 800-53, CNSSI 1253, ICD 503.
• Collaborate with compliance, engineers, architects, and Government counterparts to ensure regulatory compliance.

Skills

Cloud security

Kubernetes security

CI/CD security

DevSecOps

Vulnerability management

RMF

Compliance

Security assessments

Education

Bachelor's degree

Associate degree

Master's degree

PhD

Tools

Splunk

Nessus

SonarQube

Prisma Cloud

DAST

SAST

Job description

Position Summary

Support the DOMEX Technology Platform as a Cloud Security Engineer 3 responsible for securing, hardening, and maintaining compliance of cloud-based platforms across multiple secure networks in support of OSINT-focused mission systems.

Essential Duties and Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.
• Perform security assessments, vulnerability management, and risk analysis for cloud-based systems across secure enclaves.
• Implement and manage security controls for Kubernetes clusters and containerized applications.
• Integrate security measures into CI/CD pipelines and DevSecOps processes.
• Develop and maintain ATO packages and support compliance with standards including NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and ICD 503.
• Collaborate with compliance personnel, engineers, architects, and Government counterparts to ensure regulatory compliance.

Required Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree or equivalent with a minimum of six years of experience in the category field. Three additional years of experience may be substituted for a bachelor's degree.
• At least one DoD 8570.01-M IAT Level II or higher certification.
• 2+ years working in the cloud, securely configuring and deploying AWS services.
• Demonstrated experience securing Kubernetes platforms and integrating security into CI/CD pipelines and containers; must understand microservices architecture and service mesh.
• Experience with RMF, vulnerability management, and cloud compliance/security best practices.

Preferred Qualifications

• Multiple IAT/IAM II or III advanced certifications such as CISSP-ISSAP/ISSEP, CISM, CCSP, or SecurityX/CASP+ CE.
• AWS Solutions Architect or AWS Security Specialty certifications.
• Kubernetes certifications such as KCNA, CKA, or CKS.
• Linux administration experience and certifications such as Linux+ or Red Hat certifications including RHCSA or RHCE.
• Experience with security tools such as Splunk, Nessus, SonarQube, Prisma Cloud, DAST, and SAST tools.
• Experience applying Zero Trust framework to secure systems.
• Prior network engineering experience.
• Experience applying security controls to Generative AI implementations.

Required Education and Experience Equivalency

• High School Diploma/GED with 9 years of experience.
• Associates Degree with 9 years of experience.
• Bachelors' Degree with 6 years of experience.
• Masters' Degree with 6 years of experience.
• PhD with 6 years of experience.

RequiredCertifications

• At least one DoD 8570.01-M IAT Level II or higher certification.

Required Security Clearance

• Active TS/SCI with ability to obtain a CI Polygraph.