Senior IA Cyber Cloud Admin (RMF/DevSecOps)

Concept Plus, LLC; Dayton, Northern (OH, KY); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Concept Plus is seeking an IA Cyber Cloud Administrator to support Federal IT systems development and operations. The role requires RMF, DevSecOps, and cloud experience across AWS and hybrid environments, with a focus on security controls and compliance.

You will collaborate with DevSecOps, Cloud Engineering, and development teams to embed security into design and deployment, manage RMF artifacts, and ensure continuous monitoring and vulnerability remediation in federal settings.

Qualifications

• Bachelor’s degree in IT, Engineering, CS or related field.
• 5–7 years in Cloud Engineering/Admin or Cybersecurity.
• Experience with cloud platforms (AWS preferred).
• Experience securing CI/CD pipelines and DevSecOps environments.
• Experience with Kubernetes/Docker, CI/CD tools, AWS/Azure services, and IaC (Terraform).
• Familiarity with RMF and STIGs.
• Experience with vulnerability scanning and security tools (e.g., Nessus, Fortify, SonarQube, Anchore).

Responsibilities

• Administer and secure cloud environments (AWS and hybrid).
• Implement and maintain security controls across CI/CD pipelines.
• Support RMF activities including control implementation and ATO sustainment.
• Configure and maintain STIG-compliant systems.
• Integrate and manage automated security tools within DevSecOps pipelines.

Skills

Cloud engineering

Cybersecurity

CI/CD security

Kubernetes

Docker

IaC

RMF

Education

Bachelor's degree in IT/Engineering/CS

Master's degree preferred

Tools

Jenkins

GitLab CI

Terraform

CloudFormation

Nessus

Fortify

SonarQube

Anchore

Job description

Concept Plus is seeking an IA Cyber Cloud Administrator to support Federal IT systems development and operations. The role requires RMF, DevSecOps, and cloud experience across AWS and hybrid environments, with a focus on security controls and compliance.

You will collaborate with DevSecOps, Cloud Engineering, and development teams to embed security into design and deployment, manage RMF artifacts, and ensure continuous monitoring and vulnerability remediation in federal settings.