Cloud Security Engineer – FedRAMP/DoD Compliance (Remote)

SMX; Richmond (VA); Remote; USD 103,000 - 172,000; Full time

Benefits offered by this job

Health insurance

Paid leave

Retirement

Job summary

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6. The role will advise partners and customers navigating government security requirements while supporting authorization, audit readiness, and continuous monitoring activities.

A key focus will be improving compliance efficiency through GRC platforms, APIs, scripts, cloud-native services, and automation for

Qualifications

• Must translate federal security requirements into practical controls and processes.
• Experience building SSPs, POA&Ms, SARs and other artifacts.
• Five+ years in cybersecurity, including federal cloud security engineering.
• U.S. citizenship with ability to obtain security clearance.
• Experience with RMF and FedRAMP moderate/high.
• Experience with authorization planning and remediation activities.

Responsibilities

• Develop, review, and maintain authorization artifacts and evidence.
• Support system authorization, gap assessments, and remediation planning.
• Collaborate with cloud and DevOps teams to implement security controls.
• Coordinate with 3PAOs, AO, and government stakeholders on findings.
• Advance continuous monitoring, vulnerability management, and POA&M updates.

Skills

Cybersecurity engineering

Compliance support

Federal & DoD security requirements

Security documentation

Cloud security

Education

Bachelor's degree in Information Security or related field

Tools

AWS

Azure

GRC platforms

Nessus/Tenable

Splunk

eMASS

Paramify

Prisma Cloud

Job description

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6. The role will advise partners and customers navigating government security requirements while supporting authorization, audit readiness, and continuous monitoring activities.

A key focus will be improving compliance efficiency through GRC platforms, APIs, scripts, cloud-native services, and automation for