Senior IA Engineer – Cloud Security (TS/SCI)

Northrop Grumman; Patterson (OH); On-site; USD 98,400 - 155,400; Full time

Benefits offered by this job

Relocation assistance

Health insurance

Paid time off

Discretionary bonus

Job summary

Northrop Grumman seeks an Information Assurance Engineer to support DAF CLOUDworks at AFRL in Rome, NY. The role requires a TS/SCI eligible Top Secret clearance and strong RMF, NIST/ISO knowledge, plus IAT II certification. You'll work with multiple teams to implement controls, write IA documentation, and guide risk remediation.

Candidates should have cloud experience (AWS/Azure/Google), familiarity with DISA STIGs, and proven stakeholder communication skills within a fast-moving defense program.

Qualifications

• Bachelor’s degree with 5+ years of relevant experience OR Master’s with 3+ years OR PhD with 1+ year.
• Top-Secret Clearance with SCI eligibility.
• IAT Level II certification per DoD 8570.01.
• Experience with cloud technologies (AWS, Azure, Google Cloud).
• Familiarity with NIST SP 800-53 and ISO 27001/27002.
• Experience managing RMF packages in Xacta/EMass and applying DISA STIGs.
• Experience writing IA documentation and policies.
• Experience with POA&Ms, vulnerability management, and risk assessments.

Responsibilities

• Maintain and enhance capabilities for DAF CLOUDworks at AFRL.
• Communicate effectively with internal and external stakeholders.
• Develop and maintain IA documentation and RMF artifacts.
• Advise on security controls and remediation strategies.

Skills

IAT Level II

Cloud platforms

NIST SP 800-53

ISO 27001/27002

Xacta/EMass RMF

DISA STIGs

IA documentation

Risk assessment

Stakeholder communication

Education

Bachelor’s degree + 5+ years

Master’s degree + 3+ years

PhD + 1+ year

Tools

XACTA

EMass

Job description

Northrop Grumman seeks an Information Assurance Engineer to support DAF CLOUDworks at AFRL in Rome, NY. The role requires a TS/SCI eligible Top Secret clearance and strong RMF, NIST/ISO knowledge, plus IAT II certification. You'll work with multiple teams to implement controls, write IA documentation, and guide risk remediation.

Candidates should have cloud experience (AWS/Azure/Google), familiarity with DISA STIGs, and proven stakeholder communication skills within a fast-moving defense program.