Remote Cloud Security Engineer - DoD RMF & IAM Expert

Zachary Piper, LLC; United States; Remote; USD 200,000 - 210,000; Full time

Job summary

Zachary Piper Solutions seeks an Information Systems Security Engineer (ISSE) to design, implement, and secure cloud-native systems for DoD and federal environments. The role centers on hands-on cloud security engineering, IAM, workload protection, and integration of security controls into DevSecOps and CI/CD pipelines.

The ISSE will support RMF authorization, work with ISSMs and government stakeholders, and translate cloud architectures into security artifacts.

Qualifications

• 5–8+ years in cybersecurity or security engineering in federal/commercial settings.
• 4+ years securing production cloud workloads (AWS/Azure/GCP).
• 3+ years supporting DoD/federal RMF processes and ATO artifacts.
• Hands-on cloud security engineering beyond paperwork.

Responsibilities

• Design and maintain secure cloud architectures for production workloads.
• Engineer security controls across identities, networks, and workloads.
• Develop cloud security patterns including VPC/VNet, encryption, logging, and boundary design.
• Implement and maintain IAM solutions (SSO, SAML, OIDC, MFA) with least privilege.
• Support RMF authorization activities and security documentation.

Skills

Cloud security engineering

RMF knowledge

DoD cybersecurity

Zero Trust

Security architecture

IA M / IAM engineering

Threat monitoring

Education

Active Secret Clearance

IASAE Level II

AWS Security Specialty / AZ-500 / equivalent

Tools

AWS GovCloud

GuardDuty

Security Hub

CloudTrail

KMS / IAM

SAML / OIDC / OAuth2

MFA / RBAC / ABAC

Job description

Zachary Piper Solutions seeks an Information Systems Security Engineer (ISSE) to design, implement, and secure cloud-native systems for DoD and federal environments. The role centers on hands-on cloud security engineering, IAM, workload protection, and integration of security controls into DevSecOps and CI/CD pipelines.

The ISSE will support RMF authorization, work with ISSMs and government stakeholders, and translate cloud architectures into security artifacts.