Remote FedRAMP/DoD Cloud Security Engineer

SMX; Atlanta (GA); À distance; USD 103 000 - 172 000; Plein temps

Avantages offerts par ce poste

Health insurance

Paid leave

Retirement plan

Résumé du poste

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management for cloud systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6. The role advises partners navigating government security requirements while supporting authorization, audit readiness, and continuous monitoring.

The position emphasizes improving compliance efficiency through GRC platforms, APIs, scripts, cloud-native services, and automation for evidence collection, control validation,

Qualifications

• Provide cybersecurity engineering and compliance support for FedRAMP and DoD-authorized cloud environments, including IL4–6.
• Advise partners and customers on federal security requirements, authorization strategies, control implementation, and audit readiness.
• Develop and maintain SSPs, SAPs, SARs, POA&Ms, FedRAMP appendices, policies, and supporting evidence.
• Support authorization planning, gap assessments, control validation, evidence development, and remediation planning.
• Leverage GRC platforms, APIs, scripts, and automation to streamline compliance workflows, evidence collection, documentation updates, control testing, and reporting.
• Develop repeatable and auditable processes that improve authorization artifacts quality and reduce manual compliance effort.
• Collaborate with cloud engineering and DevOps to design, implement, and validate security controls across AWS, Azure, and hybrid environments.
• Review system changes to assess security impact and maintain authorization boundaries.
• Coordinate with system owners, 3PAOs, Authorizing Officials, and government stakeholders to address findings and support outcomes.
• Support continuous monitoring, vulnerability management, POA&Ms updates, remediation tracking, and recurring compliance deliverables.
• Evaluate security tooling and data sources to identify automation opportunities for validation and reporting.
• Track evolving federal cybersecurity requirements and translate them into actionable steps.

Responsabilités

• Provide cybersecurity engineering and compliance support for FedRAMP and DoD environments with IL4–6 authorization.
• Advise on federal DoD security requirements, authorization strategies, and audit readiness.
• Develop and maintain authorization artifacts like SSPs, POA&Ms, SARs, and policies.
• Support RMF and FedRAMP activities, including gap assessments and remediation planning.
• Automate compliance workflows using GRC platforms, APIs, and scripts to improve evidence collection and reporting.
• Create repeatable processes to improve accuracy and consistency of artifacts.
• Collaborate with cloud engineering/DevOps to validate security controls in AWS/Azure/hybrid environments.
• Review changes for security impact and update documentation accordingly.
• Coordinate with government stakeholders to address findings and support outcomes.
• Assist in continuous monitoring and remediation tracking and audits.

Connaissances

Cybersecurity engineering

Security compliance

FedRAMP

RMF

NIST SP 800-53

Cloud IAM

Automation scripting

GRC tooling

DoD security requirements

Stakeholder communication

Formation

Bachelor's degree in Information Security

Equivalent practical experience

Outils

eMASS

Paramify

Nessus/Tenable

Splunk

Prisma Cloud

Description du poste

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management for cloud systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6. The role advises partners navigating government security requirements while supporting authorization, audit readiness, and continuous monitoring.

The position emphasizes improving compliance efficiency through GRC platforms, APIs, scripts, cloud-native services, and automation for evidence collection, control validation,