Remote FedRAMP/DoD Cloud Security Engineer

SMX; United States; Remote; USD 103,000 - 172,000; Full time

Benefits offered by this job

Health insurance

Paid leave

Retirement plan

Job summary

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6 requirements. The role supports authorization, audit readiness, and continuous monitoring while coordinating with government stakeholders remotely for a Herndon, VA-based team.

The ideal candidate will drive automation, evidence collection, and control validation using GRC platforms, APIs, scripts, and

Qualifications

• Strong analytical, documentation, and problem-solving skills.
• Ability to translate federal security requirements into practical controls.
• Experience developing authorization artifacts and evidence.
• U.S. citizenship with ability to obtain a Secret or higher clearance.

Responsibilities

• Provide cyber security engineering and compliance support for FedRAMP and DoD cloud environments.
• Advise on authorization strategies, control implementation, and audit readiness.
• Develop and maintain SSPs, POA&Ms, SARs, policies, and supporting evidence.
• Collaborate with cloud engineering and DevOps to validate security controls.

Skills

Cybersecurity engineering

FedRAMP compliance

DoD security requirements

Cloud security (AWS/Azure)

GRC automation

Remediation tracking

Education

Bachelor’s degree in Information Security

Tools

eMASS

Paramify

Nessus/Tenable

Splunk

Prisma Cloud

Job description

SMX is seeking a Cyber Security Engineer to provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6 requirements. The role supports authorization, audit readiness, and continuous monitoring while coordinating with government stakeholders remotely for a Herndon, VA-based team.

The ideal candidate will drive automation, evidence collection, and control validation using GRC platforms, APIs, scripts, and