Senior Cloud SCA-R Lead — DoD TS/SCI, Onsite

Tier4 Group; Fort Meade (MD); Presencial; USD 120.000 - 180.000; Jornada completa

Descripción de la vacante

Tier4 Group seeks a Senior Cloud SCA-R to lead DoD cloud security assessments at Fort Meade, VA. The role entails performing analyses, validating CSO readiness, and delivering security assessment packages under RMF guidelines.

Requires an active DoD Top Secret clearance with SCI eligibility and hands-on use of eMASS or similar GRC tools. You will coordinate with CSP documentation and milestones, draft authorization memos, and ensure residual risk is clearly stated.

Formación

• Eight years of experience in cybersecurity or network security roles.
• Bachelor's degree in an IT-related field is preferred.
• DoD 8570 IAM/IA Technical (IAT) Level III certification required.
• Familiarity with RMF, SRG, and DoD cybersecurity controls.
• Hands-on experience with eMASS or similar GRC tools.
• Experience documenting security controls and assessment packages.

Responsabilidades

• Perform analysis and independent validations of CSOs, and conduct ConMon activities.
• Prepare Cloud Security Assessment Packages, including residual risk statements.
• Review CSP documentation and artifacts like SSPs, SARs, RARs, and POA&Ms.
• Draft Authorization Recommendation Memoranda and Provisional Authorization memos.
• Validate CSO controls in eMASS/GRC tools and maintain MSR tracking.
• Organize documentation with applicable security controls within eMASS.

Conocimientos

Cloud security

RMF SRG

eMASS

Technical writing

IAT III

Azure & AWS

Educación

Bachelor's degree (IT)

DoD 8570 IAM/IA Technical (IAT) Level III

Herramientas

eMASS

AWS

Azure

GRC tools

Descripción del empleo

Tier4 Group seeks a Senior Cloud SCA-R to lead DoD cloud security assessments at Fort Meade, VA. The role entails performing analyses, validating CSO readiness, and delivering security assessment packages under RMF guidelines.

Requires an active DoD Top Secret clearance with SCI eligibility and hands-on use of eMASS or similar GRC tools. You will coordinate with CSP documentation and milestones, draft authorization memos, and ensure residual risk is clearly stated.