IT Cloud Security Analyst

August Schell; Bethesda (MD); On-site; USD 90,000 - 120,000; Full time

Job summary

The National Library of Medicine (NLM) is seeking an IT Cloud Security Analyst to join our security compliance team in Bethesda, MD. You will implement security controls and support secure cloud adoption across AWS, GCP, and Azure, aligning with FISMA and NIH policies.

You will collaborate with ISSO, infrastructure, and enterprise security teams to ensure the availability, integrity, and confidentiality of mission-critical systems while meeting NIH mandates.

Qualifications

• Experience implementing security controls in cloud environments.
• Familiarity with FISMA, NIH policy, and federal security requirements.
• Ability to coordinate with end users and security teams.

Responsibilities

• Implement security controls for cloud environments.
• Support secure cloud adoption across AWS/GCP/Azure.
• Collaborate with ISSO and security teams to ensure NIH/FISMA compliance.

Skills

Cloud security

FISMA compliance

NIH policy knowledge

Security controls

Collaboration with security teams

Education

Bachelor's degree in CS, Information Security, or related field

Tools

AWS

GCP

Azure

Job description

Location: Bethesda, MD (Onsite 3–5 days per week)

Employment Type: Full-time

The National Library of Medicine (NLM) is seeking an IT Cloud Security Analyst to join our security compliance team. In this role, you will work closely with the NLM Information Systems Security Officer (ISSO) and play a critical part in safeguarding NLM’s IT infrastructure. The role focuses on implementing security controls, ensuring compliance with federal cybersecurity framework and support secure cloud adoption across multiple platforms. The analyst works closely with end point owners, infrastructure and network security teams, and with enterprise security teams to meet NIH mandates.

You will be part of a broader IT program that provides end-to-end support—including help desk, systems, network, incident response and security services—ensuring the availability, integrity, and confidentiality of mission-critical systems.

Responsibilities

• Implement security controls, and ensure compliant cloud environments on AWS, GCP, or Azure adhering to FISMA, NIH policy, and federal security requirements
• Recommend, design and support Cloud security services and control implementation including Identity Access, Priv