Remote FedRAMP/DoD RMF Cybersecurity Engineer

SMX; Augusta (ME); Remote; USD 103,000 - 172,000; Full time

Benefits offered by this job

Health insurance

Paid leave

Retirement

Job summary

SMX is hiring a Cyber Security Engineer to provide security engineering, compliance, and risk management for cloud systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6. The role guides partners on security requirements and assists with authorization, audit readiness, and continuous monitoring.

The position emphasizes automation for evidence collection and remediation tracking, with hands-on work across AWS, Azure, and hybrid environments.

Qualifications

• Strong analytical, documentation, and problem-solving skills for secure, compliant outcomes.
• Excellent communication and stakeholder-management abilities.
• Ability to translate federal security requirements into practical technical controls.
• U.S. citizenship with ability to obtain a Secret or higher clearance.
• Bachelor’s degree in information security, cybersecurity, CS, or related field, or equivalent experience.
• 5+ years of cybersecurity experience, incl. 3+ years federal cloud security RMF/ISSO.
• Knowledge of NIST SP 800-53 Rev. 5, FedRAMP Moderate/High, DoD IL4–6 overlays.
• Experience developing and maintaining SSPs, POA&Ms, SARs, and other artifacts.
• Experience supporting authorization planning, gap assessments, audit readiness, remediation.
• Hands-on AWS/Azure/hybrid cloud incl IAM, encryption, logging, CM, security monitoring.
• Experience using GRC platforms, APIs, scripting, or automation.
• Familiarity with eMASS, Paramify, Nessus/Tenable, Splunk, Prisma Cloud.

Responsibilities

• Provide cybersecurity engineering and compliance support for FedRAMP and DoD cloud environments.
• Advise partners and customers on security requirements, authorization strategies, and audit readiness.
• Develop, review, and maintain authorization documentation (SSP, SAP, SAR, POA&Ms, FedRAMP appendices).
• Support authorization activities across FedRAMP/RMF, including gap assessments and remediation planning.
• Leverage GRC platforms, APIs, scripts, and automation to streamline compliance workflows.

Job description

SMX is hiring a Cyber Security Engineer to provide security engineering, compliance, and risk management for cloud systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6. The role guides partners on security requirements and assists with authorization, audit readiness, and continuous monitoring.

The position emphasizes automation for evidence collection and remediation tracking, with hands-on work across AWS, Azure, and hybrid environments.