Senior Cloud Security Engineer - RMF/ATO for Federal Apps

Central Strategies, LLC; Alexandria, Northern (VA, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Central Strategies, LLC is seeking a Senior ISSE to lead security engineering for cloud modernization supporting USCG mission systems in the Alexandria, VA area. The role blends cloud security design with RMF modernization, ATO support, and DevSecOps integration.

You will work with cloud engineers, cybersecurity, compliance, and program leadership to protect confidentiality, integrity, and availability of cloud-hosted systems while enabling secure modernization and operational resilience.

Qualifications

• Bachelor’s degree with 12+ years of relevant experience or Master’s with 10+ years.
• Extensive experience in information security engineering and cloud security architecture.
• Hands-on experience with AWS and Azure security services and guardrails.

Responsibilities

• Architect, implement, and govern secure cloud infrastructure across AWS and Azure.
• Lead security design, risk assessments, and RMF/ATO activities for cloud systems.
• Develop SSPs, SARs, POA&Ms, and related compliance artifacts.
• Integrate security controls into CI/CD pipelines and DevSecOps workflows.
• Monitor cloud environments with SIEM, CSPM, CWPP and related tooling.
• Collaborate with cloud engineering, compliance, operations, and program leadership.

Skills

Cloud security architecture

Security leadership

Threat modeling

DevSecOps

Stakeholder engagement

RMF/ATO guidance

Education

Bachelor’s degree in Computer Science / Information Systems / Cybersecurity

Master’s degree or higher

PhD in a technical discipline

Tools

Terraform

Ansible

Puppet

Docker

Kubernetes

Python / Bash / PowerShell

Job description

Central Strategies, LLC is seeking a Senior ISSE to lead security engineering for cloud modernization supporting USCG mission systems in the Alexandria, VA area. The role blends cloud security design with RMF modernization, ATO support, and DevSecOps integration.

You will work with cloud engineers, cybersecurity, compliance, and program leadership to protect confidentiality, integrity, and availability of cloud-hosted systems while enabling secure modernization and operational resilience.