Cloud Security Engineer 4

RPMGlobal; Bethesda (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

RPMGlobal seeks a Cloud Security Engineer 4 to safeguard the DOMEX Technology Platform, securing cloud-native environments and maintaining compliance across secure networks for OSINT-focused mission systems.

You will perform security assessments, manage vulnerability programs, and implement controls for Kubernetes and containerized apps, while integrating security into CI/CD pipelines and DevSecOps. Strong DoD RMF experience and a TS/SCI with CI Polygraph are required.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree with a minimum of ten years of experience in the category field.
• At least one DoD 8570.01-M IAT Level II or higher certification.
• 5+ years working in the cloud, securely configuring and deploying AWS services.
• Demonstrated experience securing Kubernetes platforms and integrating security into CI/CD pipelines and containers; must understand microservices architecture and service mesh.
• Experience with RMF, vulnerability management, and cloud compliance/security best practices.

Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.
• Perform security assessments, vulnerability management, and risk analysis for cloud-based systems across secure enclaves.
• Implement and manage security controls for Kubernetes clusters and containerized applications.
• Integrate security measures into CI/CD pipelines and DevSecOps processes.
• Develop and maintain ATO packages and support compliance with standards including NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and ICD 503.
• Collaborate with compliance personnel, engineers, architects, and Government counterparts to ensure regulatory compliance.

Skills

AWS Security

Kubernetes Security

CI/CD Security

Zero Trust

RMF

NIST SP 800-37/53

IAT Level II

Cloud Architecture

Vulnerability Management

Service Mesh

Education

Bachelor's degree

Master's degree

PhD

Tools

Splunk

Nessus

SonarQube

Prisma Cloud

DAST

SAST

Kubernetes

Job description

Position Summary

Support the DOMEX Technology Platform as a Cloud Security Engineer 4 responsible for securing, hardening, and maintaining compliance of cloud-based platforms across multiple secure networks in support of OSINT-focused mission systems.

Essential Duties and Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.
• Perform security assessments, vulnerability management, and risk analysis for cloud-based systems across secure enclaves.
• Implement and manage security controls for Kubernetes clusters and containerized applications.
• Integrate security measures into CI/CD pipelines and DevSecOps processes.
• Develop and maintain ATO packages and support compliance with standards including NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and ICD 503.
• Collaborate with compliance personnel, engineers, architects, and Government counterparts to ensure regulatory compliance.

Required Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree with a minimum of ten years of experience in the category field.
• At least one DoD 8570.01-M IAT Level II or higher certification.
• 5+ years working in the cloud, securely configuring and deploying AWS services.
• Demonstrated experience securing Kubernetes platforms and integrating security into CI/CD pipelines and containers; must understand microservices architecture and service mesh.
• Experience with RMF, vulnerability management, and cloud compliance/security best practices.

Preferred Qualifications

• Multiple IAT/IAM II or III advanced certifications such as CISSP-ISSAP/ISSEP, CISM, CCSP, or SecurityX/CASP+ CE.
• AWS Solutions Architect or AWS Security Specialty certifications.
• Kubernetes certifications such as KCNA, CKA, or CKS.
• Linux administration experience and certifications such as Linux+ or Red Hat certifications including RHCSA or RHCE.
• Experience with security tools such as Splunk, Nessus, SonarQube, Prisma Cloud, DAST, and SAST tools.
• Experience applying Zero Trust framework to secure systems.
• Prior network engineering experience.
• Experience applying security controls to Generative AI implementations.

Required Education and Experience Equivalency

• Bachelors' Degree with 10 years of experience.
• Masters' Degree with 10 years of experience.
• PhD with 10 years of experience.

RequiredCertifications

• At least one DoD 8570.01-M IAT Level II or higher certification.

Required Security Clearance

• Active TS/SCI with ability to obtain a CI Polygraph.