Cloud Security Engineer II: Secure Cloud & DevSecOps

RPMGlobal; Bethesda, Northern (MD, KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

RPMGlobal in Bethesda, MD is seeking a Cloud Security Engineer 2 to secure, harden, and maintain compliance of cloud-based platforms across secure networks in support of OSINT-focused mission systems.

You will provide security expertise for cloud environments, perform risk analysis, manage vulnerabilities, secure Kubernetes, and integrate security into CI/CD pipelines and DevSecOps, aligning with RMF, NIST SP 800-37/53, CNSSI 1253, and ICD 503.

Qualifications

• Security expertise for cloud and cloud-native environments.
• Security assessments, vulnerability management, and risk analysis for cloud-based systems.
• Security controls for Kubernetes clusters and containerized apps.
• CI/CD pipelines and DevSecOps integration.
• ATO packages and compliance with NIST SP 800-37, 800-53, CNSSI 1253, ICD 503.
• Collaboration with compliance, engineering, and government counterparts to ensure regulatory compliance.

Responsibilities

• Provide technical security expertise for cloud environments.
• Perform security assessments, vulnerability management, and risk analysis.
• Implement and manage security controls for Kubernetes clusters.
• Integrate security into CI/CD pipelines and DevSecOps processes.
• Develop and maintain ATO packages and support compliance with NIST, CNSSI, ICD standards.
• Collaborate with government and engineering teams to ensure regulatory compliance.

Skills

Cloud security

Kubernetes security

CI/CD security integration

Risk analysis

Vulnerability management

Regulatory compliance

Education

Bachelor's degree with 3 years experience

High School Diploma/GED with 5 years experience

Associates degree with 5 years experience

Masters degree with 3 years experience

PhD with 3 years experience

Tools

Splunk

Nessus

SonarQube

Prisma Cloud

DAST/SAST tools

Job description

RPMGlobal in Bethesda, MD is seeking a Cloud Security Engineer 2 to secure, harden, and maintain compliance of cloud-based platforms across secure networks in support of OSINT-focused mission systems.

You will provide security expertise for cloud environments, perform risk analysis, manage vulnerabilities, secure Kubernetes, and integrate security into CI/CD pipelines and DevSecOps, aligning with RMF, NIST SP 800-37/53, CNSSI 1253, and ICD 503.