DoD RMF Cloud IAM Security Architect

Second Front; Washington (District of Columbia); Remote; USD 200,000 - 210,000; Full time

Benefits offered by this job

Competitive salary

Employer-paid health coverage

401(k) with company contribution

Wellness benefits and mental health

Equity incentive plan

Home office stipend

Professional development stipend

Flexible remote work opportunities

Generous parental leave

Employee referral bonus program

Job summary

Second Front Systems is seeking a technically deep Information Systems Security Engineer to strengthen our cybersecurity and solutions architecture practice at the intersection of engineering delivery and DoD authorization.

You will own security architecture, create RMF artifacts, design IAM, zero trust, and ensure compliance across cloud-native environments, working with ISSMs, assessors, and engineers to drive secure-by-design outcomes and successful authorizations.

Qualifications

• Active U.S. Secret clearance required; DoD RMF experience essential.
• Translate designs into RMF artifacts, SSPs, and control narratives.
• Strong RMF/NIST knowledge with DoD ICAM and Zero Trust focus.
• Ability to produce assessor-ready diagrams and documentation.

Responsibilities

• Architect IAM designs spanning federation, MFA, RBAC/ABAC, and DoD PKI/CAC.
• Create authorization boundary, network, and data-flow diagrams for CUI.
• Translate decisions into RMF artifacts and PPSM registrations.
• Assess designs against NIST SP 800-53, DISA SRG, STIGs, and FedRAMP.
• Govern security impact of changes; advise ISSMs and ISSOs.
• Collaborate with architects and customers to embed security from start.
• Enforce Zero Trust and compliance-as-code in cloud environments.
• Lead as SME during assessments, readiness reviews, and audits.

Skills

Identity & Access Management

SAML

OIDC/OAuth2

RBAC/ABAC

Privileged Access

Cloud IAM

Zero Trust

RMF

NIST 800-53

NIST 800-37 RMF

GRC tools eMASS

Education

Security clearance: Secret

CISSP/CASP/CSSLP

Cloud certs: AWS/Azure/GCP security

Tools

Lucidchart

draw.io

Visio

Job description

Second Front Systems is seeking a technically deep Information Systems Security Engineer to strengthen our cybersecurity and solutions architecture practice at the intersection of engineering delivery and DoD authorization.

You will own security architecture, create RMF artifacts, design IAM, zero trust, and ensure compliance across cloud-native environments, working with ISSMs, assessors, and engineers to drive secure-by-design outcomes and successful authorizations.