Senior Cloud Security & RMF/C&A SME

Diné Development Corporation; Yorktown (VA); On-site; USD 116,000 - 136,000; Full time

Benefits offered by this job

Medical coverage

Retirement with company match

Paid time off

Job summary

Diné Development Corporation (DDC) in Virginia is seeking a Cloud Computing Specialist (CCS) – SME to lead Information Assurance and cloud security efforts across DoD cloud environments, applying RMF, NIST SP 800-53/800-37, and FedRAMP methodologies. The role supports IOEE/IOSEE with independent assessment and risk mitigation.

The position emphasizes cloud architecture, data security, and compliance documentation, requiring DoD IA experience and a valid security clearance; contract-award

Qualifications

• Five years of C&A RMF/NIST experience on large DoD systems.
• Secret clearance at proposal submission (Moderate Risk/Confidential/ Tier 3 NACLC/ANACI as applicable).
• IAM Level III certifications: CISSP, CISM, or CCISO.
• Demonstrated RMF/C&A experience and DoD IA experience.
• Knowledge of NIST SP 800-53/800-37 and FedRAMP assessment methods.

Responsibilities

• Serve as SME for cloud security, IA, and C&A/RMF activities supporting IOEE/IOSEE.
• Assess cloud environments against RMF, NIST SP 800-53/800-37 and DoD requirements.
• Apply FedRAMP methodologies to evaluate controls in cloud information systems.
• Identify, assess, manage, and resolve cloud security risks.
• Evaluate security across architecture, data, platforms, apps, and operations.
• Conduct IA control assessments and C&A reviews for large information systems.
• Recommend cloud security best practices across deployment/service models.
• Provide independent guidance on cloud security to engineering and program stakeholders.
• Develop and support security documentation for assessment, authorization, and compliance.

Skills

C&A RMF

NIST RMF

Cloud security

Information Assurance

FedRAMP

DoD IA

CISSP/CISM/CCISO

Tools

AWS

Azure

eMASS

Job description

Diné Development Corporation (DDC) in Virginia is seeking a Cloud Computing Specialist (CCS) – SME to lead Information Assurance and cloud security efforts across DoD cloud environments, applying RMF, NIST SP 800-53/800-37, and FedRAMP methodologies. The role supports IOEE/IOSEE with independent assessment and risk mitigation.

The position emphasizes cloud architecture, data security, and compliance documentation, requiring DoD IA experience and a valid security clearance; contract-award