Cloud Security Engineer - DoD RMF & DevSecOps Lead

Leidos LLC; Seaside (CA); On-site; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Cloud Security Engineer in Seaside, CA to safeguard cloud infrastructure and data for DoD testing platforms. You will architect secure cloud solutions, implement zero-trust and DevSecOps practices, and drive RMF/ATO activities across cloud environments.

The role requires DoD-focused experience, NIST/DI​SA compliance, and the ability to coordinate with cross-functional teams while maintaining documentation in eMASS and protecting CUI/PII.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, CS, or related field.
• 10+ years designing, implementing, and managing cloud security solutions.
• Experience with DoW RMF, ATO processes, and NIST 800-series.
• Hands-on securing cloud environments (AWS/Azure) per DISA SRG and FedRAMP.
• Experience implementing STIGs and continuous monitoring.
• Knowledge of IAM, encryption, network security, and Zero Trust.
• Ability to obtain DoW background (Tier 3+) and meet IT access requirements.
• U.S. Citizenship required.

Responsibilities

• Design, implement, and maintain security architectures for cloud-based systems.
• Ensure compliance with RMF, NIST SP 800-53, and DISA SRG.
• Support system authorization lifecycle including SSPs and POA&Ms.
• Enforce STIGs and secure baselines across cloud environments.
• Monitor for threats, coordinate incident response, and reporting.
• Maintain evidence in eMASS and protect CUI/PII in cloud.
• Collaborate with engineers and admins to integrate security into design.

Skills

RMF

NIST SP 800-53

DevSecOps

Zero Trust

Cloud security

Vulnerability management

Incident response

IAM

Education

Bachelor's degree in Cybersecurity/Information Technology/Computer Science or related field

Master's degree in related field

Tools

AWS

Azure

FedRAMP

eMASS

STIGs

NIST 800-53

Job description

Leidos is seeking a Cloud Security Engineer in Seaside, CA to safeguard cloud infrastructure and data for DoD testing platforms. You will architect secure cloud solutions, implement zero-trust and DevSecOps practices, and drive RMF/ATO activities across cloud environments.

The role requires DoD-focused experience, NIST/DI​SA compliance, and the ability to coordinate with cross-functional teams while maintaining documentation in eMASS and protecting CUI/PII.