Remote Federal Cloud Security Engineer (RMF/FedRAMP)

SMX; Helena (MT); Remote; USD 103,000 - 172,000; Full time

Benefits offered by this job

Health insurance

Paid leave

Retirement

Job summary

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6 requirements. The role supports a remote team with a Herndon, VA base and partners with cloud engineering and DevOps to implement security controls.

Responsibilities include developing authorization documentation, streamlining evidence collection via automation, and coordinating with stakeholders to address

Qualifications

• Strong analytical, documentation, and problem-solving skills focused on secure and compliant outcomes.
• Excellent communication and stakeholder-management skills, including the ability to advise partners, customers, engineers, and government stakeholders.
• Ability to translate federal security requirements into practical technical controls and operational processes.
• U.S. citizenship with the ability to obtain and maintain a Secret or higher security clearance.
• Five or more years of cybersecurity experience, including at least three years supporting federal cloud security engineering, information assurance, RMF, or ISSO functions.
• Knowledge of NIST SP 800-53 Rev. 5, FedRAMP Moderate and High, DoD IL4–6 overlays, RMF, and related federal compliance frameworks.
• Experience developing and maintaining SSPs, POA&Ms, SARs, policies, control evidence, and other authorization artifacts.
• Experience supporting authorization planning, gap assessments, audit readiness, control implementation, and remediation activities.
• Hands-on experience with AWS, Azure, or hybrid cloud environments, including IAM, encryption, logging, configuration management, and security monitoring.
• Experience using GRC platforms, APIs, scripting, or automation to improve compliance workflows.
• Familiarity with tools such as eMASS, Paramify, Nessus/Tenable, Splunk, Prisma Cloud, or comparable solutions.
• CISSP, CGRC/CAP, CISM, Security+, or similar cybersecurity certificate

Responsibilities

• Provide cybersecurity engineering and compliance support for FedRAMP and DoD-authorized cloud environments, including IL4–6.
• Advise partners and customers on federal and DoD security requirements, authorization strategies, control implementation, and audit readiness.
• Develop, review, and maintain authorization documentation, including SSPs, SAPs, SARs, POA&Ms, FedRAMP appendices, policies, and supporting evidence.
• Support system authorization and reauthorization activities across FedRAMP/RMF, including gap assessments, control validation, evidence development, and remediation planning.
• Leverage GRC platforms, APIs, scripts, and automation to streamline compliance workflows, evidence collection, documentation updates, control testing, and reporting.
• Develop repeatable and auditable processes that reduce manual compliance effort and improve the accuracy and consistency of authorization artifacts.
• Collaborate with cloud engineering and DevOps teams to design, implement, and validate security controls across AWS, Azure, and hybrid environments.
• Review system changes and significant change requests to assess security impact, identify documentation updates, and maintain authorization boundaries.
• Coordinate with system owners, engineers, 3PAOs, Authorizing Officials, and government stakeholders to address findings and support authorization outcomes.
• Support continuous monitoring, vulnerability management, POA&Ms updates, remediation tracking, and recurring compliance deliverables.
• Evaluate security tooling and data sources to identify opportunities for automated control validation and compliance reporting.
• Track evolving federal cybersecurity requirements and translate them into practical technical and operational actions.

Skills

Cybersecurity engineering

FedRAMP & DoD security requirements

RMF & audit readiness

GRC platforms, APIs, scripting, and-

Cloud security (AWS/Azure)

Documentation and artifacts

Stakeholder management

Security clearance readiness

Education

Bachelor's degree in Information Security, Cybersecurity, Computer Science, or related field, or equivalent practical experience

Tools

eMASS

Paramify

Nessus/Tenable

Splunk

Prisma Cloud

GRC platforms

Job description

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6 requirements. The role supports a remote team with a Herndon, VA base and partners with cloud engineering and DevOps to implement security controls.

Responsibilities include developing authorization documentation, streamlining evidence collection via automation, and coordinating with stakeholders to address