Federal Cloud Security Engineer

augustschell; Bethesda (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

The National Library of Medicine (NLM) is seeking an IT Cloud Security Analyst to join our security compliance team in Bethesda, MD. You will implement security controls, ensure federal compliance, and support secure cloud adoption across AWS, GCP, and Azure.

You will work with ISSO, infrastructure, and enterprise security teams to meet NIH mandates, monitor environments with SIEM tools like Splunk, and drive security improvements across hybrid environments.

Qualifications

• Experience securing cloud environments (AWS, GCP or Azure), preferably within FISMA compliance frameworks.
• Knowledge of federal compliance frameworks including FISMA, NIST 800-53, FedRAMP, RMF, and ATO/POA&M processes.
• Bachelor’s degree or equivalent practical experience in Cloud security.
• 5+ years of information security with at least 3 years in cloud security; experience administering Linux and Windows endpoints; strong network/firewall knowledge.
• Strong written and verbal communication; ability to produce security documentation for technical and non-technical stakeholders.
• Experience in regulated federal environments with governance and compliance requirements; collaboration with multi-disciplinary teams.
• CISSP certification (or ability to obtain within 6 months).

Responsibilities

• Implement security controls and ensure compliant cloud environments (AWS, GCP, Azure) per FISMA and NIH policy.
• Design and support Cloud security services and controls: IAM, privileged access, vulnerability management, configuration compliance, encryption, log management.
• Monitor cloud environments for security events; perform vulnerability assessments and report security posture with dashboards.
• Integrate Splunk, Tenable and data sources to enhance monitoring, correlation and compliance visibility.
• Respond to incidents; conduct root-cause analysis and remediation per NIH incident response plan.
• Conduct threat modeling and security assessments for cloud deployments; guide migrations from on-prem to cloud.
• Enhance security automation and evaluate new platforms to improve coverage and efficiency.
• Provide security guidance and compliance support to developers, operations, and system owners.

Skills

Cloud security

AWS/GCP/Azure security

Federal compliance frameworks

Security documentation

Communication skills

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field

Tools

Splunk

Tenable

APIs

Job description

The National Library of Medicine (NLM) is seeking an IT Cloud Security Analyst to join our security compliance team in Bethesda, MD. You will implement security controls, ensure federal compliance, and support secure cloud adoption across AWS, GCP, and Azure.

You will work with ISSO, infrastructure, and enterprise security teams to meet NIH mandates, monitor environments with SIEM tools like Splunk, and drive security improvements across hybrid environments.