Senior Cloud Compliance Engineer - DoD RMF/CMMC Expert

Menlo Ventures; Colorado; On-site; USD 185,000 - 270,000; Full time

Benefits offered by this job

Equity + Benefits

Health, Dental, Vision

Job summary

True Anomaly seeks a Principal Compliance Engineer to lead secure architecture design and compliance efforts in AWS and Azure Gov environments. You will implement STIGs, encryption standards, and automation to sustain audit readiness and secure deployments.

You will drive vulnerability remediation, CI/CD security integration, and cross-functional collaboration with engineering and DevOps to meet RMF IL5/IL6 and CMMC mandates. The role demands hands-on leadership and active clearance.

Qualifications

• 10+ years of experience in cybersecurity engineering, cloud compliance, or DevSecOps roles.
• Proven experience designing STIG-compliant configurations.
• Deep understanding of FIPS-validated encryption, TLS configurations, and data protection.
• Hands-on experience with vulnerability scanning, remediation planning, and automated patching.
• Familiarity with DoD RMF (IL5/IL6), CMMC and related audit frameworks.
• Proficiency with Terraform, Ansible, Azure Policy, GitHub Actions, and SIEM/logging platforms.
• Experience with authorization boundary design and customer isolation in AWS/Azure Gov.
• Active security clearance; TS/SCI preferred.

Responsibilities

• Architect secure, audit-ready systems in AWS and Azure Gov environments.
• Develop and maintain custom STIGs for cloud and SaaS configurations.
• Design secure configurations with encryption standards and data protection controls.
• Integrate compliance checks into CI/CD pipelines and IaC workflows.
• Support incident response, log review, and system hardening with RMF/CMMC alignment.
• Lead vulnerability remediation and automated patching workflows.
• Produce and maintain SSPs, diagrams, controls, and POA&Ms.

Skills

Cybersecurity engineering

Cloud compliance

DevSecOps

RMF/DoD

CMMC

DoD RMF IL5/IL6

AWS/Azure Gov

Security automation

Tools

Terraform

Ansible

Azure Policy

GitHub Actions

SIEM

Job description

True Anomaly seeks a Principal Compliance Engineer to lead secure architecture design and compliance efforts in AWS and Azure Gov environments. You will implement STIGs, encryption standards, and automation to sustain audit readiness and secure deployments.

You will drive vulnerability remediation, CI/CD security integration, and cross-functional collaboration with engineering and DevOps to meet RMF IL5/IL6 and CMMC mandates. The role demands hands-on leadership and active clearance.