Remote Cybersecurity Engineer: FedRAMP/DoD RMF

SMX; City of Albany (NY); Remote; USD 103,000 - 172,000; Full time

Benefits offered by this job

Health insurance

Paid leave

Retirement

Job summary

SMX seeks a Cyber Security Engineer to provide security engineering, compliance, and risk management for cloud environments aligned with FedRAMP, DoD IL4–6, and RMF requirements. The role advises partners on security requirements, develops authorization artifacts, and enables continuous monitoring and remediation tracking.

The position is remote supporting a Herndon, VA based team, collaborating with cloud engineers and DevOps to implement controls across AWS, Azure, and hybrid setups.

Qualifications

• Bachelor's degree or equivalent experience with 5+ years in cybersecurity.
• Experience with FedRAMP, RMF, and DoD security requirements.
• Ability to produce SSPs, POA&Ms, SARs, and policy documentation.

Responsibilities

• Provide security engineering and compliance support for FedRAMP and DoD cloud environments.
• Advise on authorization strategies, control implementation, and audit readiness.
• Develop, review, and maintain authorization artifacts such as SSPs and SARs.
• Support authorization planning, gap assessments, and remediation activities.
• Automate evidence collection and reporting using GRC tools and scripts.
• Collaborate with cloud engineering and DevOps teams across AWS, Azure, or hybrid clouds.
• Coordinate with stakeholders to address findings and support authorization outcomes.
• Support continuous monitoring, vulnerability management, and POA&M updates.

Skills

Cybersecurity engineering

FedRAMP knowledge

GRC automation

Cloud security

NIST RMF

Education

Bachelor's degree in Information Security or related field

Tools

GRC platforms

Nessus/Tenable

Splunk

Prisma Cloud

Job description

SMX seeks a Cyber Security Engineer to provide security engineering, compliance, and risk management for cloud environments aligned with FedRAMP, DoD IL4–6, and RMF requirements. The role advises partners on security requirements, develops authorization artifacts, and enables continuous monitoring and remediation tracking.

The position is remote supporting a Herndon, VA based team, collaborating with cloud engineers and DevOps to implement controls across AWS, Azure, and hybrid setups.