Senior Cloud Security Engineer — RMF, DevSecOps, IC

RPMGlobal; Bethesda, Northern (MD, KY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Base-2 Solutions is seeking a Senior Cloud Cybersecurity Engineer to support accreditation and operation of a cloud-based OSINT platform for DoD/IC use. You will help centralize TCPED processes, integrate secure DevSecOps practices, and lead RMF compliance for cloud architectures and Kubernetes deployments.

The role requires strong Linux, scripting, and DoD RMF experience, with certifications and ability to obtain elevated access as required.

Qualifications

• Bachelor's or Master's in a related technical field with significant DoD security experience.
• DoD 8570.01-M IAT/IAM II certification or higher and ability to obtain elevated access.
• Experience with RMF processes, NIST SP 800-37/53, CNSSI 1253, and DoDI guidance.
• Hands-on Linux, scripting, and cloud security across containers and CI/CD.
• Experience with Xacta/eMASS and security controls for cloud-native apps.

Responsibilities

• Review and provide feedback on cybersecurity artifacts and architecture.
• Conduct vulnerability assessments and risk analysis for cloud systems.
• Implement and manage security controls for containers and cloud infra.
• Collaborate with DevSecOps to ensure secure coding and pipelines.
• Develop automation scripts for STIG compliance and validation.
• Support RMF/ATO/IATT package activities for government programs.

Skills

Linux

Scripting (Bash/Python/Perl)

Cloud security

RMF/8570 IAT/IAM II

CI/CD security

Kubernetes security

Vulnerability assessment

Policy & compliance

Education

Bachelor's degree in Cybersecurity/CS/Info Assurance/Engineering

Master's degree in Cybersecurity/CS/Info Assurance/Engineering

Tools

Xacta

eMASS

SIEM/DAST/SAST tools

Cloud platforms (C2S/AWS)

Job description

Base-2 Solutions is seeking a Senior Cloud Cybersecurity Engineer to support accreditation and operation of a cloud-based OSINT platform for DoD/IC use. You will help centralize TCPED processes, integrate secure DevSecOps practices, and lead RMF compliance for cloud architectures and Kubernetes deployments.

The role requires strong Linux, scripting, and DoD RMF experience, with certifications and ability to obtain elevated access as required.