Senior Cloud Security Engineer - Zero Trust & A&A

Bespoke Technologies, Inc.; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Bespoke Technologies, Inc. in Reston, VA, seeks an Information Systems Security Engineer (Senior Principal) to lead security design and implementation for cloud-hosted information systems in compliance with RMF and NIST guidance.

You will translate complex requirements into effective security controls across identity, network, compute, storage, and data protection, develop A&A artifacts, and collaborate with stakeholders to drive remediation and continuous monitoring.

Qualifications

• Demonstrated experience engineering, implementing, and assessing security controls for cloud-hosted information systems per RMF/NIST guidance and A&A processes.
• Proven hands-on experience securing Cloud environments across identity, network, compute, storage, database, logging, monitoring, encryption, and privileged-access capabilities.
• Experience translating security requirements, system architectures, data flows, and mission use cases into implementable technical controls and documented security designs.
• Experience developing and maintaining A&A artifacts, including SSPs, control implementations, architecture diagrams, security assessment plans, POA&Ms, continuous-monitoring plans, and evidence packages.
• Ability to assess control implementation and effectiveness; identify gaps; recommend remediation; and track corrective actions with technical teams and stakeholders.
• Experience applying Zero Trust, least privilege, defense in depth, segmentation, encryption, auditability, and secure configurations to cloud and hybrid architectures.
• Security engineering activities across the lifecycle: requirements, design reviews, implementation, vulnerability remediation, testing, deployment, and operations.
• Collaborate with cloud, network, application, database, cybersecurity, Oracle, and Government stakeholders and communicate risks clearly.
• Strong written and verbal communication; able to produce security designs, test plans, evidence matrices, remediation plans, and executive briefings.
• 8+ years relevant experience

Responsibilities

• Lead security engineering across RMF and A&A lifecycles.
• Implement and assess security controls for cloud-hosted information systems.
• Develop and maintain system security plans, control implementation statements, architecture diagrams, and evidence packages.
• Coordinate remediation actions to closure with technical teams and stakeholders.
• Communicate risk and compliance status to executives and program teams.
• Support defense in depth and Zero Trust in cloud/hybrid architectures.
• Oversee lifecycle activities from requirements to deployment and operational transition.

Skills

RMF & A&A processes

Cloud security engineering

Zero Trust principles

Security architectures

Communication with stakeholders

Threat modeling & remediation

Tools

Terraform

OCI Resource Manager

Ansible

APIs

Scripting

SIEM / SOAR

Job description

Bespoke Technologies, Inc. in Reston, VA, seeks an Information Systems Security Engineer (Senior Principal) to lead security design and implementation for cloud-hosted information systems in compliance with RMF and NIST guidance.

You will translate complex requirements into effective security controls across identity, network, compute, storage, and data protection, develop A&A artifacts, and collaborate with stakeholders to drive remediation and continuous monitoring.