Cybersecurity Engineer – Cloud

Jobtailor; California (MO); On-site; USD 150,000 - 190,000; Full time

Job summary

Jobtailor seeks a senior cloud security architect to lead multi-tenant cloud deployments with RMF/ATO documentation. You will validate STIGs, perform ACAS/Nessus checks, and ensure secure IaC/CaC pipelines using Terraform, Ansible, and Helm.

Collaboration with cross-functional teams and government customers will be key. Applicants should hold DoD 8140-aligned certifications and bring extensive experience securing hybrid cloud environments, with strong communication and documentation skills for

Qualifications

• Proven experience securing multi-classification cloud environments.
• Hands-on STIG review and hardening, ACAS/Nessus validation.
• RMF/ATO artifacts like SSP and POA&M maintained.
• Jira/Xacta workflows for RMF and vulnerability tracking.

Responsibilities

• Build and secure multi-tenant cloud environments.
• Own RMF/ATO packages and provide SSP/POA&M evidence.
• Validate security outputs before environment promotion.
• Maintain continuous monitoring with cloud telemetry and Grafana.

Skills

Multi-Tenant Cloud Security

RMF/ATO Management

STIG Review/Hardening

IaC/CaC Security Tooling

DoD 8140 Certification

Education

Bachelor's degree + 9+ years

Master's degree + 7+ years

PhD or JD + 4+ years

Tools

Jira

Xacta

Prometheus

Grafana

Cloud Telemetry

Job description

• Build and secure multi-tenant cloud environments
• Implement JSIG, NIST SP 800-53, STIG, and MLS/MILS baselines across Dev/Integration/Test cloud enclaves
• Own RMF/ATO packages for cloud environments, producing SSP, POA&M, and full RMF evidence
• Validate STIG, ACAS/Nessus, SAST/DAST, and container-security outputs prior to environment promotion
• Perform functional validation of Capability Provider and External cyber artifacts
• Coordinate delivery of validated evidence to the Infrastructure TO for baseline updates
• Maintain cloud-aligned continuous monitoring, including audit logs, cloud telemetry, and Prometheus/Grafana security metrics
• Support Cloud and DSOP joint early design efforts and integrate pipeline-aware cloud security
• Validate IaC/CaC baselines using Terraform, Ansible, and Helm for secure, consistent cloud deployments and promotion gates
• Provide cyber recommendations during CCB promotion evaluations
• Offer WHY-based guidance and vector checks to Capability Providers and team members
• Collaborate with operators, engineers, Capability Providers, and government teams to support mission readiness

Requirements

• Bachelor's degree and nine (9) years or more experience; Master's degree and seven (7) years or more experience; PhD or JD and four (4) years or more experience
• Proven experience securing multi classification cloud environments
• Hands-on experience performing STIG review/hardening, validating ACAS/Nessus outputs, and adjudicating SAST/DAST results
• Experience maintaining RMF/ATO artifacts, including SSP, POA&M, and continuous monitoring evidence
• Familiarity with Jira/Xacta workflows for RMF and vulnerability tracking
• DoD 8140-aligned certification: CISSP, CCSP, CASP+, or equivalent
• Desired: Experience architecting and securing hybrid cloud and MLS/MILS cross-domain environments
• Desired: Prior support to SCA assessments, including finding remediation, documentation, and assessor coordination
• Desired: Knowledge of secure DevSecOps pipeline integration, including image signing, SBOM/SCA, and environment gate validation
• Desired: Experience with advanced cyber assessment, scanning, and STIG automation tools
• Desired: Experience with cloud IaC/CaC security tooling, including Terraform, Ansible, Helm, and Argo CD
• Desired: Familiarity with Zero Trust architecture, container hardening, and cloud security automation platforms
• Strong documentation and communication skills aligned with RMF evidence and CMCC governance

Core Competencies

Demonstrates expertise in securing multi-tenant cloud environments and managing RMF/ATO packages, including SSP and POA&M documentation. Proficient in implementing security baselines and continuous monitoring practices while collaborating with cross-functional teams to ensure mission readiness.

Highest-signal resume keywords

• Multi-Tenant Cloud Security
• RMF/ATO Management
• STIG Review/Hardening
• IaC/CaC Security Tooling
• DoD 8140-Aligned Certification

ATS Optimization Keywords

Hard Skills

• Cloud Security
• STIG Validation
• ACAS/Nessus
• SAST/DAST
• Terraform
• Ansible
• Helm
• Continuous Monitoring
• Cyber Assessment
• Vulnerability Tracking

Soft Skills

• Documentation Skills
• Communication Skills

Certifications & Qualifications

• CISSP
• CCSP
• CASP+

Industry Keywords

• JSIG
• NIST SP 800-53
• STIG
• MLS/MILS
• Zero Trust Architecture
• DevSecOps
• SCA Assessments

Tools & Technologies

• Jira
• Xacta
• Prometheus
• Grafana
• Cloud Telemetry