Senior Compliance Engineer - DoD RMF & Cloud Security

True Anomaly, Inc.; Denver, Long Beach, Washington (CO, CA, District of Columbia); On-site; USD 105,000 - 175,000; Full time

Job summary

True Anomaly, Inc. seeks an experienced Compliance Engineer to lead secure, compliant architectures within regulated cloud environments (AWS/Azure Government). The role requires 5+ years in security engineering and DevSecOps, with RMF IL5/IL6 and CMMC experience.

You will build, package, and demonstrate controls through training, video, and evidence collection, coordinating with DevOps and product teams to meet DoD requirements and regulatory audits.

Qualifications

• 5+ years of cybersecurity engineering, cloud compliance, or DevSecOps roles.
• Hands-on vulnerability scanning, remediation planning, and automated patching.
• Familiarity with DoD RMF (IL5/IL6), CMMC and related audit frameworks.
• Proficiency with tools such as JIRA, Nessus, Docebo.

Responsibilities

• Implement and maintain secure, audit-ready systems in AWS and Azure Government environments.
• Develop and maintain custom STIGs for cloud and customer-deployed configurations.
• Embed compliance training across the enterprise; automate scoring and readiness assessments.
• Remediate vulnerabilities and drive secure patch management and baseline enforcement.
• Support audits with detailed documentation, SSPs, diagrams, and POA&Ms.
• Collaborate with product, engineering and security teams to meet DoD requirements.

Skills

Security engineering

Cloud compliance

DevSecOps

RMF IL5/IL6

CMMC

Tools

JIRA

Nessus

Docebo

Job description

True Anomaly, Inc. seeks an experienced Compliance Engineer to lead secure, compliant architectures within regulated cloud environments (AWS/Azure Government). The role requires 5+ years in security engineering and DevSecOps, with RMF IL5/IL6 and CMMC experience.

You will build, package, and demonstrate controls through training, video, and evidence collection, coordinating with DevOps and product teams to meet DoD requirements and regulatory audits.