Remote ISSE: Cloud Security Engineer for DoD RMF

Piper Companies; United States; Remote; USD 200,000 - 210,000; Full time

Benefits offered by this job

Annual bonus

Equity opportunities

Medical benefits

Home-office stipend

Job summary

Piper Companies is seeking an Information Systems Security Engineer (ISSE) to support a federal and DoD cybersecurity mission. The ISSE will design, secure, and authorize cloud-native systems across production environments, focusing on hands-on cloud security, IAM, and DevSecOps integration for RMF compliance.

The role requires experience securing production cloud workloads, strong AWS GovCloud expertise, and the ability to translate cloud architecture into authorization artifacts.

Qualifications

• 5–8+ years in cybersecurity or information security engineering for federal or commercial environments.
• At least 4 years securing production cloud workloads across AWS, Azure, or GCP.
• 3+ years supporting DoD or federal RMF authorization processes and ATO documentation.
• Hands-on cloud security engineering beyond pure compliance or documentation.

Responsibilities

• Design, implement, and maintain secure cloud architectures for production workloads across AWS, Azure, or GCP, with AWS GovCloud focus.
• Engineer security controls across identities, networks, data, and workloads; implement IAM, SSO/federation, MFA, RBAC/ABAC.
• Integrate security into CI/CD pipelines and DevSecOps workflows; enforce security via IaC and compliance-as-code.
• Support RMF authorization activities per NIST SP 800-37/800-53 and prepare authorization artifacts.
• Develop security diagrams, boundary documents, and SSP content; translate architecture decisions into control requirements.
• Collaborate with ISSOs, ISSMs, system owners, and government stakeholders to resolve findings and sustain authorization.

Job description

Piper Companies is seeking an Information Systems Security Engineer (ISSE) to support a federal and DoD cybersecurity mission. The ISSE will design, secure, and authorize cloud-native systems across production environments, focusing on hands-on cloud security, IAM, and DevSecOps integration for RMF compliance.

The role requires experience securing production cloud workloads, strong AWS GovCloud expertise, and the ability to translate cloud architecture into authorization artifacts.