On-Site AI & Cloud Security Engineer — Federal

RCG, Inc.; Suitland (MD); On-site; USD 130,000 - 140,000; Full time

Benefits offered by this job

Health Care Plan (Medical, Dental &amp

Retirement Plan (401k, IRA)

Life Insurance

Paid Time Off

Family Leave

Disability (Short/Long Term)

Training & Development

Wellness Resources

Job summary

RCG, Inc. is seeking an AI/Cybersecurity Solutions Engineer to join a federal SAE team in Suitland, MD.

This on-site senior role combines AI automation, cloud security, and federal compliance expertise to drive an agentic AI security platform and CI/CD‑driven delivery. The ideal candidate has 4+ years of cloud security engineering, 2+ years in AI/LLM tech, DoD 8570 Security+, and strong Python, Bedrock, and AWS security proficiency.

Qualifications

• Bachelor's degree in computer science, cybersecurity, or a related technical discipline.
• 4+ years of cloud security engineering experience.
• 2+ years of production experience with generative AI/LLM technologies.
• 2+ years of experience working with AWS security services.
• 2+ years of experience supporting federal compliance frameworks (NIST, FedRAMP, FISMA).
• 2+ years of Jira and Confluence experience in Agile/technical delivery environments.
• Current DoD 8570-compliant certification required (Security+).
• Solid Python development experience (Python 3.11+, boto3, type hints, robust error handling).
• Experience with Amazon Bedrock (agents, action groups, Knowledge Bases, guardrails, prompt engineering, RAG).
• Knowledge of AWS security technologies (Security Hub, GuardDuty, Inspector, Config, IAM, CloudTrail, OIDC).
• Container security experience (ECR, ECS/EKS, image scanning, runtime monitoring, hardening).
• Knowledge of NIST SP 800-53 Rev. 5 and its assessment procedures.
• Experience with CI/CD and IaC (GitLab CI, CloudFormation, Terraform).
• Git/version-control experience and strong documentation practices.

Responsibilities

• Implement Bedrock agent action groups, including OpenAPI schemas and Python Lambda layers.
• Develop Retrieval-Augmented Generation (RAG) pipelines using Bedrock Knowledge Bases with NIST/CIS references.
• Engineer prompts, guardrails, and input validation to improve AI accuracy and security.
• Evolve foundation-model strategies as requirements mature.
• Develop AI-assisted capabilities for security assessment, remediation, hardening, alert triage, and compliance workflows.
• Build automated NIST 800-53 control assessments and security evidence collection.
• Develop remediation and hardening automation across AWS services (S3, EC2, IAM, CloudTrail, ECS, EKS).
• Integrate live data from AWS Security Hub, GuardDuty, Inspector, Config for security analysis.
• Support SLA logic, KEV correlation, risk enrichment, and remediation tracking.
• Support telemetry aggregation and SIEM integrations (Microsoft Sentinel, AWS Security Lake).
• Maintain GitLab CI/CD pipelines for linting, testing, security scanning, builds, deployments.
• Implement secure OIDC-based AWS authentication and IaC with least-privilege IAM.
• Maintain documentation in Jira/Confluence and ensure traceability from requirements to deployments.

Skills

Python development

AWS security

Generative AI

Jira/Confluence

Security+

CI/CD

Infrastructure as Code

GIT & version control

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

GitLab CI/CD

CloudFormation

Terraform

Jira

Confluence

Bedrock

AWS Security Hub

Job description

RCG, Inc. is seeking an AI/Cybersecurity Solutions Engineer to join a federal SAE team in Suitland, MD.

This on-site senior role combines AI automation, cloud security, and federal compliance expertise to drive an agentic AI security platform and CI/CD‑driven delivery. The ideal candidate has 4+ years of cloud security engineering, 2+ years in AI/LLM tech, DoD 8570 Security+, and strong Python, Bedrock, and AWS security proficiency.