DoD RMF Security Engineer - Cloud IAM Architect

Second Front Systems; Washington (District of Columbia); Hybrid; USD 200,000 - 210,000; Full time

Benefits offered by this job

100% employer-paid medical, dental,和视力

401(k) with 3% company contribution

Wellness benefits and One Medical

Equity incentive plan

New hire technology and home office 1

Annual professional development

Flexible PTO and federal holidays

Parental leave

Flexible remote work opportunities

Referral bonus

Job summary

Second Front Systems is seeking an Information Systems Security Engineer to own security architecture and RMF compliance for the Game Warden platform and hosted customer apps. You will design secure-by-design solutions and translate engineering decisions into RMF artifacts and authorization evidence, ensuring alignment with DoD ICAM and Zero Trust.

You will lead identity management, boundary diagrams, and data flow analyses, working with ISSMs, ISSOs, and assessors to support assessments,

Qualifications

• Active U.S. Secret clearance required.
• DoD 8570 IASAE Level II certification required or obtainable within 90 days.
• Cloud security certifications (AWS/Azure/GCP) required or obtainable within 6 months.
• 5–8 years in security engineering or cloud security architecture.
• Minimum 4 years designing production workloads in AWS/Azure/GCP.
• Minimum 3 years supporting DoD/federal RMF authorizations.
• Fluent in SSO/federation, MFA, RBAC/ABAC, privileged access and cloud IAM.
• Translate designs into RMF artifacts, SSP, PPSM, AO review.

Responsibilities

• Architect identity and access management designs across federation, MFA, privileged access in AWS, Azure, GCP.
• Build authorization boundary diagrams showing trust boundaries and data flows.
• Translate decisions into RMF artifacts and SSP content for assessments.
• Evaluate designs against NIST 800-53, DISA SRG, STIGs, and FedRAMP.
• Govern security impact of architecture changes and integrations with customers.
• Coordinate with Solutions Architects to embed security from onboarding onward.
• Establish Zero Trust guardrails and compliance‑as‑code in cloud environments.
• Serve as SME during assessments and audits.

Skills

Identity and access management

Cloud security architecture

RMF / NIST 800-53

DoD security clearance

Communication with stakeholders

Architecture diagrams

Zero Trust

GRC tools (eMASS)

Education

DoD 8570/8140 IASAE Level II

CISSP/CASP/CSSLP

AWS/Azure/GCP Cloud Security Certification

Tools

Lucidchart

draw.io

Visio

AWS IAM

GCP IAM

Azure RBAC

KMS/HSM

Job description

Second Front Systems is seeking an Information Systems Security Engineer to own security architecture and RMF compliance for the Game Warden platform and hosted customer apps. You will design secure-by-design solutions and translate engineering decisions into RMF artifacts and authorization evidence, ensuring alignment with DoD ICAM and Zero Trust.

You will lead identity management, boundary diagrams, and data flow analyses, working with ISSMs, ISSOs, and assessors to support assessments,