Cybersecurity Cloud SME

Enterprise Solutions & Management; Richmond (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Enterprise Solutions and Management (ESM) is seeking a Cybersecurity Cloud SME to support an enterprise-level DoD program. You will ensure cloud-hosted IT systems meet DoD cybersecurity requirements and guide the secure deployment of programs and applications.

You will review policies, assess threats, and provide guidance to assessment teams for CVAs in cloud environments, helping strengthen security across Defense and federal customers.

Qualifications

• Knowledge of cloud security architecture to align with DoD requirements.
• Ability to review cloud security policies, identify gaps, and suggest improvements.
• Knowledge of cloud security threats, vulnerabilities, and emerging technologies.
• Ability to assess and support security for protecting, detecting, monitoring, and responding to threats.
• Skill in providing cybersecurity guidance throughout deployment lifecycle to ensure DoD compliance.
• Ability to advise CVA teams to identify weaknesses and recommend corrective actions.

Responsibilities

• Define and ensure cloud-hosted IT systems meet DoD cybersecurity requirements.
• Review cloud security policies and propose improvements.
• Guide secure deployment of programs and applications in cloud environments.
• Provide cybersecurity guidance during deployment to maintain DoD standards.
• Advise CVA teams on assessments for cloud-hosted environments.

Skills

Cloud security architecture

Policy review & gaps

Threat monitoring & CVA support

DoD cyber requirements

Communication with government

Adaptability under pressure

Security deployment guidance

Education

Secret clearance

Cloud Security Certification (OCI/AWS/Azure/GCP)

Job description

Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services that meet mission needs for Defense and Federal customers. We are hiring a Cybersecurity Cloud SME to support an enterprise-level program within a federal environment.

Job Description and Responsibilities

Ensures the architecture and design of cloud-hosted IT systems meet Department of Defense (DoD) cybersecurity requirements. Reviews cloud security policies and recommends improvements to strengthen security and support the protection, detection, monitoring, and response capabilities for systems and data. Applies current knowledge of cloud security engineering practices and emerging threats to support the secure deployment of programs and applications. Provides cybersecurity guidance throughout the deployment process to ensure systems comply with DoD standards and requirements. Advises assessment teams on conducting Cybersecurity Vulnerability Assessments (CVAs) for cloud-hosted environments.

Required Knowledge, Skills and Abilities (KSA)

• Knowledge of cloud security architecture and engineering principles to ensure cloud-hosted IT systems are designed and implemented in accordance with Department of Defense (DoD) cybersecurity requirements.
• Ability to review cloud security policies, identify gaps, and recommend improvements to strengthen security controls and the overall cloud security posture.
• Knowledge of cloud security threats, vulnerabilities, and emerging technologies to support the secure deployment and operation of cloud-hosted systems and applications.
• Ability to assess and support security capabilities for protecting, detecting, monitoring, and responding to threats affecting cloud-hosted systems and data.
• Skill in providing cybersecurity guidance throughout the system deployment lifecycle to ensure compliance with DoD security standards, policies, and requirements.
• Ability to support and advise assessment teams in conducting Cybersecurity Vulnerability Assessments (CVAs) of cloud-hosted environments to identify security weaknesses and recommend corrective actions.

Desired KSA

• Be a positive, self-motivated, and proactive person with the ability to adapt to change and tolerate stressful situations
• Candidate must communicate effectively with team members, team lead, management, and government customers
• Must have the ability and desire to research and develop creative solutions to unique problems with minimal supervision

Minimum Training, Education, and Certifications

• Two (2) years of experience achieving ATOs in a cloud environment (OCI, AWS, Azure, GCP)
• Five (5) years of achieving ATOs for compartment DoD IT systems.
• Computing Environment certification: Cloud Security Certification (OCI, AWS, Azure, GCP)
• Secret

Physical Requirements

• Required to stand, walk and sit; communicate verbally both in person and by telephone; use hands to finger, handle or feel objects or controls; reach with hands and arms. Regularly required to stoop, kneel, bend, crouch and lift up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, color vision and the ability to adjust focus.
• Physical demands associated with this position include extensive walking (including stairs) throughout offices and between buildings. May require use of public transportation, personal or Government vehicle to drive to local and/or remote office locations.

Additional Requirements

• Other duties as assigned

ESM provides equal employment opportunity to all individuals regardless of race, color, creed, religion, gender, age, sexual orientation, national origin or ancestry, disability, genetic information, veteran status, gender identification or any other characteristic protected by state, federal or local law.