Remote FedRAMP/DoD Cloud Security Engineer

SMX; Juneau (AK); On-site; USD 103,100 - 1,718,200; Full time

Benefits offered by this job

Health insurance

Paid leave

Retirement

Job summary

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6 requirements. Remote role supporting a Herndon, VA team, with focus on authorization, audit readiness, and continuous monitoring.

You will help streamline evidence collection, validate controls, and drive automation across AWS, Azure, and hybrid environments.

Qualifications

• Provide cybersecurity engineering and compliance support for FedRAMP and DoD-authorized cloud environments, including IL4–6.

Responsibilities

• Provide cybersecurity engineering and compliance support for FedRAMP and DoD-authorized cloud environments, including IL4–6.
• Advise partners and customers on federal and DoD security requirements, authorization strategies, control implementation, and audit readiness.
• Develop, review, and maintain authorization documentation (SSPs, SAPs, SARs, POA&Ms, FedRAMP Appendices, policies, evidence).
• Support authorization planning, gap assessments, control validation, evidence development, and remediation planning.
• Leverage GRC platforms, APIs, scripts, and automation to streamline compliance workflows, evidence collection, documentation updates, control testing, and reporting.
• Develop repeatable and auditable processes to reduce manual compliance effort and improve artifact accuracy.
• Collaborate with cloud engineering/DevOps to design and validate security controls in AWS/Azure/hybrid environments.
• Review system changes to assess security impact and update documentation and boundaries.
• Coordinate with system owners, 3PAOs, Authorizing Officials, and stakeholders to address findings and support outcomes.
• Support continuous monitoring, vulnerability management, POA&Ms updates, remediation tracking, and recurring compliance deliverables.
• Evaluate security tooling and data sources to identify opportunities for automated control validation and reporting.
• Track evolving federal requirements and translate them into practical actions.

Skills

FedRAMP/DoD cloud security

Authorization & RMF

SSP/SAP/SAR documentation

GRC automation scripting

AWS/Azure/hybrid cloud

Stakeholder communication

Nessus/Tenable

Splunk

Prisma Cloud

eMASS

Paramify

Education

Bachelor’s degree in Information Security or related field

CISSP/CGRC/CAP/CISM/Security+ or equivalent

5+ years cybersecurity experience (federal cloud RMF/ISSO)

Tools

eMASS

Paramify

Nessus/Tenable

Splunk

Prisma Cloud

Job description

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6 requirements. Remote role supporting a Herndon, VA team, with focus on authorization, audit readiness, and continuous monitoring.

You will help streamline evidence collection, validate controls, and drive automation across AWS, Azure, and hybrid environments.