Platform Security & Compliance Lead (DoD RMF/ATO)

LMI Consulting, LLC; Arlington (VA); On-site; USD 160,000 - 190,000; Full time

Job summary

LMI Consulting, LLC in Arlington, VA seeks a Senior Security & Compliance Engineer to secure our platform for onboarding, deploying, and hosting third-party applications for HQDA G-4. The role focuses on turning security requirements into automated checks, evidence, and actionable findings for government decisions.

The position requires hands-on engineering with DoD RMF/ATO experience, cloud security expertise, and scripting to automate validation. Active Secret clearance is required.

Qualifications

• Bachelor's degree or equivalent practical experience.
• Eight or more years of experience in security engineering, cloud security, DevSecOps, or federal authorization.
• Demonstrated experience supporting DoD RMF and ATO activities.
• Strong knowledge of NIST security controls and federal cybersecurity requirements.
• Experience securing cloud-hosted or enterprise application platforms.
• Experience assessing third-party software against security controls, deployment requirements, and vulnerability findings.
• Hands-on software engineering or scripting experience used to automate security control validation, evidence collection, vulnerability checks, or monitoring.
• Ability to work directly with platform engineers, application teams, government personnel, and vendor representatives.
• Active Secret clearance.

Responsibilities

• Lead the security engineering and documentation that support the platform's Risk Management Framework and Authority to Operate activities.
• Maintain the platform security baseline, control evidence, authorization documentation, and continuous monitoring approach.
• Map controls provided by the common platform and identify the application-specific controls each third-party vendor must satisfy.
• Assess third-party applications against prescribed security controls and deployment and hosting standards.
• Review security evidence, test results, and vulnerability findings; document gaps, risk, and criteria for remediation.
• Provide government personnel with clear findings and technical recommendations so they can coordinate remediation with third-party vendors. Validate remediation evidence before deployment or continued hosting.
• Integrate security checks, evidence collection, and monitoring into platform delivery and operations where practical.
• Communicate security posture and unresolved risks to government and program leadership.

Skills

Security engineering

Cloud security

DevSecOps

Automation scripting

Government communications

Team collaboration

Active Secret clearance

Education

Bachelor's degree in cybersecurity, computer science, engineering, or related field

Tools

AWS

Cloud security tooling

Automation tooling

Job description

LMI Consulting, LLC in Arlington, VA seeks a Senior Security & Compliance Engineer to secure our platform for onboarding, deploying, and hosting third-party applications for HQDA G-4. The role focuses on turning security requirements into automated checks, evidence, and actionable findings for government decisions.

The position requires hands-on engineering with DoD RMF/ATO experience, cloud security expertise, and scripting to automate validation. Active Secret clearance is required.