Senior Cloud Security Engineer – RMF & Zero Trust

Booz Allen Hamilton; St. Louis (MO); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an experienced Information Systems Security Engineer to help design, implement, and assess security controls for cloud-hosted information systems across the system lifecycle.

You will work across RMF, ICD 503, and NIST guidance, translating complex requirements into implementable technical controls, artifacts, and continuous-monitoring plans, while collaborating with multiple stakeholder teams to strengthen security and enable informed authorization decisions.

Qualifications

• 8+ years of information systems security engineering, cloud security, or cybersecurity.
• Experience engineering, implementing, and assessing security controls for cloud-hosted information systems per RMF, ICD 503, NIST guidance.

Responsibilities

• Design, implement, and assess security controls for cloud-hosted information systems.
• Translate requirements, architectures, data flows, and mission needs into practical security designs and controls.
• Develop and maintain A&A artifacts and evidence packages.
• Identify gaps, residual risk, and remediation actions; track closure.

Skills

Security controls

RMF

NIST guidance

Zero Trust

least privilege

defense in depth

encryption

auditability

cloud security

Education

Bachelor's degree

Tools

Terraform

Ansible

APIs

Scripting

Job description

Booz Allen Hamilton is seeking an experienced Information Systems Security Engineer to help design, implement, and assess security controls for cloud-hosted information systems across the system lifecycle.

You will work across RMF, ICD 503, and NIST guidance, translating complex requirements into implementable technical controls, artifacts, and continuous-monitoring plans, while collaborating with multiple stakeholder teams to strengthen security and enable informed authorization decisions.