Senior Cloud Security Architect—RMF & DevSecOps Lead

RPMGlobal; Bethesda (MD); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Base-2 Solutions is seeking a Senior Cloud Cybersecurity Engineer to drive accreditation and operation of a modern cloud stack under the DOMEX Technology Platform for OSINT across Defense and IC. The role emphasizes security controls, RMF processes, and secure CI/CD integration in a cloud environment.

You will coordinate with DevSecOps and infrastructure teams, perform vulnerability assessments, and stay current with cloud security threats and best practices to support IATT/ATO packages and

Qualifications

• Bachelor's or Master's degree with extensive DoD experience required.
• IAT/IAM Level II or higher certification and ability to obtain privileged access.
• Hands-on Linux, scripting (Bash, Python, Perl).
• Experience with Commercial Cloud Services (AWS) and cloud-based enterprise services.
• Experience with RMF processes and DoD security standards (NIST SP 800-37/53).
• Experience securing applications and infrastructure and integrating security into CI/CD pipelines.

Responsibilities

• Review and feedback on system cybersecurity artifacts and BOE results.
• Perform vulnerability assessments and risk analysis for cloud-based systems.
• Implement and manage security controls for containerized apps and cloud infra.
• Collaborate with DevSecOps and development teams for secure coding practices.
• Maintain automation for STIG compliance and CI/CD security.
• Support RMF packages and Authority to Operate processes.

Skills

Linux

Bash scripting

Python

Cloud security

Secure coding

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, Engineering

Master's degree in related technical discipline

Tools

AWS

Kubernetes

CI/CD tooling

SAST/DAST tools

RMF/Xacta/eMASS

Job description

Base-2 Solutions is seeking a Senior Cloud Cybersecurity Engineer to drive accreditation and operation of a modern cloud stack under the DOMEX Technology Platform for OSINT across Defense and IC. The role emphasizes security controls, RMF processes, and secure CI/CD integration in a cloud environment.

You will coordinate with DevSecOps and infrastructure teams, perform vulnerability assessments, and stay current with cloud security threats and best practices to support IATT/ATO packages and