Cybersecurity Engineer, Sr.

AGE Solutions; Fort Meade (MD); On-site; USD 108,000 - 132,000; Full time

Benefits offered by this job

26 Days Paid Leave

Performance Bonuses

401(k) with match

Life insurance up to $300K

Medical, dental, vision plans

Tuition reimbursement

Job summary

AGE Solutions is seeking a Senior Cloud SCA-R Team Lead to support a DoD customer from Fort Meade, MD, focusing on independent validation and ConMon for authorized CSPs/CSOs using RMF-aligned processes and eMASS tooling.

You will deliver up to 30 Cloud Security Assessment Packages annually, provide risk-based recommendations, and draft DoD authorization memoranda. This onsite role requires TS clearance, and US citizenship.

Qualifications

• Bachelor's degree in an IT-related field.
• Active DoD Top Secret clearance with SCI eligibility.
• 8 years in cybersecurity or network security.
• US citizenship required.
• Hands-on with eMASS or similar GRC tools.
• Experience with Azure/AWS cloud security.
• Strong written and verbal communication skills.
• Ability to work onsite near Fort Meade, MD.

Responsibilities

• Perform cybersecurity assessments and validations of CSOs for DoD PA process.
• Evaluate CSP documentation per government guidance (SSP, SAR, RAR, etc.).
• Review submissions for provisional authorizations (Change/Extension/Deviations).
• Prepare up to 30 Cloud Security Assessment Packages annually with findings.
• Draft Authorization Memoranda and DoD Provisional Authorization documents.
• Validate CSO controls in eMASS and track in MSR.
• Analyze CSP submissions and provide detailed risk assessments.
• Organize documentation and maintain DoD Cloud Process Guide.

Skills

Top Secret clearance

IAT Level III

RMF knowledge

Cloud security experience

eMASS experience

Education

Bachelor's degree in IT or related field

Tools

eMASS

GRC tools

Job description

AGE Solutions is seeking a Senior Cloud SCA-R Team Lead to support a DoD customer with cybersecurity risk management and assessment activities. This onsite role at Fort Meade, Maryland focuses on independent validation and Continuous Monitoring (ConMon) for authorized Cloud Service Providers (CSPs) and Cloud Service Offerings (CSOs) using DoD RMF-aligned processes and eMASS/GRC tooling.

Key Responsibilities

• Perform cybersecurity assessments and validations of Cloud Service Offerings (CSOs) supporting the Department of Defense (DoD) Provisional Authorization (PA) process.
• Evaluate Cloud Service Provider (CSP) documentation packages per government guidance, including key artifacts such as the Cloud Architecture Diagram, System Security Plan (SSP), SSP Addendum, Readiness Assessment Report (RAR), System Architecture, Security Assessment Plan (SAP), Security Assessment Report (SAR), and associated Plans of Action & Milestones (POA&Ms).
• Review and process additional submissions for existing provisional authorizations, including Change Requests, Extension Requests, Deviation Requests, Whitelist Requests, Corrective Action Plans, templates, process guide approvals, and ConMon artifacts.
• Prepare and deliver up to 30 Cloud Security Assessment Packages annually, including validated cybersecurity controls, certifier recommendations, and a statement of residual risk.
• Participate in technical kickoff meetings and review preliminary documentation to assess CSP readiness posture.
• Analyze CSP submissions (including RAR, SAP, SSP, and architectural diagrams) and provide detailed technical feedback.
• Assess and document operational impact related to authorizations, changes, and vulnerabilities within the CSP environment.
• Develop Cloud Security Assessment Packages aligned to established guidelines, including the SAR, POA&Ms, and any Deviation Requests.
• Draft Authorization Recommendation Memoranda covering CSO compliance with DoD cybersecurity controls, residual risks, and technical findings.
• Prepare formal DoD Provisional Authorization memoranda, including authorization length, CSO boundary, services provided, operating conditions, DoD usage considerations, and follow-on activities.
• Validate CSO controls within eMASS or other government-provided GRC tools, ensuring accurate tracking in the Mission Status Report (MSR).
• Review and verify the Customer Responsibility Matrix (CRM) to ensure correct control inheritance is reflected in eMASS/GRC systems.
• Upload authorization conditions as system-level POA&Ms in eMASS and monitor resolution progress.
• Organize and associate received documentation with applicable security controls inside eMASS.
• Maintain and update the DoD Cloud Process Guide, including checklists, templates, forms, and guidance documents.
• Assist with internal requirements and how-to guides for assessors conducting CSP validations.
• Document and refine assessment procedures and validation best practices aligned with DoDI 8510.01 and the DoD Cloud Computing Security Requirements Guide (SRG).
• Support ongoing development and annual updates of the DoD Cloud Assessment Process Guides as requested by the Government.

Required Qualifications

• Bachelor's degree (IT-related field preferred).
• DoD 8570 IAM/IA Technical (IAT) Level III certification.
• Eight (8) years of overall experience in cybersecurity or network security.
• US Citizenship is required.
• Must have and maintain an active DoD Top Secret clearance with SCI eligibility.
• Familiarity with security controls for Azure, AWS, and assorted cloud platforms.
• Strong understanding of DoD Risk Management Framework (RMF), DoDI 8510.01, and DoD Cloud Computing Security Requirements Guide (SRG).
• Hands-on experience with eMASS or other government-provided GRC tools.
• Familiarity with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms.
• Ability to analyze complex cloud architectures and provide accurate risk assessments.
• Strong technical writing and communication skills to produce security assessment reports and formal recommendations.
• Ability to reside within commutable distance of Fort Meade, MD for a fully onsite schedule.

Technologies

• Azure
• AWS
• eMASS
• GRC tools
• DoD Risk Management Framework (RMF)

Compensation and Location

Location: Fort Meade, MD (onsite)

Salary: USD 120,000 per year

Benefits

• 26 Days Paid Leave: vacation, sick, personal time, and holidays.
• Performance Bonuses based on individual contributions and company-wide results.
• 401(k) with match: the company matches 3% with immediate vesting.
• Company-paid life insurance up to $300K, with options for additional coverage for employees and dependents.
• Multiple medical plans, dental, vision, FSA, and HSA options.
• 15 days of fully paid leave for new parents.
• Military Differential Pay for active duty employees.
• Paid training and certifications, tuition reimbursement, and the tools and technology needed to perform the role.
• In the event of a company sale, the CEO committed to returning 80% of net proceeds to employees.

About AGE Solutions

AGE Solutions is a technology and professional services company providing consulting, advanced technology solutions, and essential services across U.S. government, defense, and intelligence sectors. The organization supports major agencies with client-focused solutions and efforts aimed at addressing complex challenges and improving security outcomes.