Remote FedRAMP & DoD Cloud Security Engineer

SMX

Herndon (VA)

On-site

USD 103,100 - 1,718,200

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Health insurance

Paid leave

Retirement plan

Job summary

SMX seeks a Cyber Security Engineer to provide security engineering, compliance, and RMF support for FedRAMP and DoD IL4–6 cloud environments. The role advises partners on federal requirements, develops authorization documentation, and collaborates with engineering teams to implement controls.

The position supports a Herndon, VA based team with a remote work model, focusing on automation, evidence collection, and continuous monitoring.

Qualifications

Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or related field, or equivalent practical experience.
Five or more years of cybersecurity experience, including federal cloud security engineering/RMF/ISSO functions.
Knowledge of NIST SP 800-53 Rev. 5, FedRAMP Moderate/High, DoD IL4–6 overlays, RMF, and related federal frameworks.
Experience developing and maintaining SSPs, POA&Ms, SARs and other artifacts.
Hands-on experience with AWS, Azure, or hybrid cloud environments (IAM, encryption, logging, monitoring).
Experience using GRC platforms, APIs, scripting, or automation to streamline compliance workflows.
Familiarity with tools such as eMASS, Paramify, Nessus/Tenable, Splunk, Prisma Cloud.

Responsibilities

Provide cybersecurity engineering and compliance support for FedRAMP and DoD-authorized cloud environments (IL4–6).
Advise partners and customers on federal security requirements, authorization strategies, control implementation, and audit readiness.
Develop and maintain authorization documentation (SSPs, SAPs, SARs, POA&Ms, appendices, policies).
Support authorization and reauthorization activities across FedRAMP/RMF with gap assessments and remediation planning.
Leverage GRC platforms, APIs, scripts, and automation to streamline compliance workflows and evidence collection.
Create repeatable, auditable processes to reduce manual compliance effort and improve artifact accuracy.
Collaborate with cloud engineering/DevOps to design and validate security controls across AWS/Azure/hybrid environments.
Review changes for security impact and maintain authorization boundaries.
Coordinate with system owners, 3PAOs, Authorizing Officials, and government stakeholders to address findings.
Support continuous monitoring, vulnerability management, POA&Ms, remediation tracking, and recurring deliverables.
Evaluate security tooling and data sources for automated validation and reporting.