RMF-Driven Cloud Security Administrator

Triwill Group; United States; Remote; USD 110,000 - 150,000; Full time

Job summary

Concept Plus seeks an IA Cyber Cloud Administrator to support Federal IT systems, focusing on secure cloud environments, RMF compliance, and DevSecOps integration. The role spans automation, vulnerability management, and continuous monitoring within both classified and unclassified cloud settings.

You will work with Cloud Engineering, DevSecOps, and PMO teams to ensure secure design, automated testing, and ongoing authorization support across federal environments.

Qualifications

• US Citizen.
• Must obtain Tier-3 Secret Clearance.
• Bachelor’s degree in IT, Engineering, CS, or related field; Master’s preferred.
• 5–7 years in Cloud Engineering/Admin or Cybersecurity.
• Experience with cloud platforms (AWS preferred).
• Experience securing CI/CD pipelines and DevSecOps environments.
• Experience with Kubernetes/Docker, CI/CD tools, and IaC (Terraform).
• Familiarity with RMF and STIGs.
• Experience with vulnerability scanning tools such as Nessus, Fortify, SonarQube, Anchore.

Responsibilities

• Administer and secure cloud environments, including AWS and hybrid infrastructures.
• Implement and maintain security controls across CI/CD pipelines.
• Support RMF activities, control implementation, assessment, and ATO sustainment.
• Configure STIG-compliant systems per federal standards.
• Integrate security tools into DevSecOps pipelines (SAST, DAST, SCA).
• Monitor security posture with CM tools, logs, and alerts.
• Conduct vulnerability assessments and remediation tracking.
• Develop automation scripts for patching, config management, evidence collection.
• Provision, configure, and maintain federal cloud infra using IaC (Terraform/CloudFormation).
• Collaborate with development, DevSecOps, and cloud engineering teams.
• Maintain security documentation ( SSPs, POA&Ms, baselines).
• Support incident response and remediation actions.
• Trend and remediate application risks with agile teams.
• Manage CSP security tools (AWS Security Hub, Azure Defender).
• Troubleshoot cloud-based application performance and security issues.
• Apply security patches and manage IAVAs.

Skills

Kubernetes

Docker

CI/CD

Terraform

AWS

DevSecOps

RMF

STIG

Vulnerability scanning

Education

Bachelor’s degree in IT/Engineering/CS

Master’s degree preferred

Tools

ACAS

Nessus

Fortify

SonarQube

Anchore

Jenkins

GitLab CI

Job description

Concept Plus seeks an IA Cyber Cloud Administrator to support Federal IT systems, focusing on secure cloud environments, RMF compliance, and DevSecOps integration. The role spans automation, vulnerability management, and continuous monitoring within both classified and unclassified cloud settings.

You will work with Cloud Engineering, DevSecOps, and PMO teams to ensure secure design, automated testing, and ongoing authorization support across federal environments.