Staff Security & Compliance Engineer, Secure Platforms - Clearance Required

LMI Consulting, LLC; Newport News (VA); On-site; USD 121,000 - 194,000; Full time

Job summary

LMI is seeking a Staff Security & Compliance Engineer to build security and authorization into a U.S. Army enterprise data platform in Newport News, Virginia.

This role focuses on making secure delivery repeatable and leading the platform's authorization efforts while collaborating with engineers to automate controls, evidence collection, continuous monitoring, and remediation. The ideal candidate has extensive experience in security engineering, DoD RMF/ATO, cloud security, and automation, with

Qualifications

• Bachelor’s degree or equivalent practical experience in cybersecurity, CS, or engineering.
• 8+ years in security engineering, cloud security, DevSecOps, or federal authorization.
• Led DoD RMF and ATO activities, with strong NIST controls knowledge.
• Experience securing cloud-hosted or enterprise platforms and automation tooling.

Responsibilities

• Own the security-engineering and authorization approach for a secure cloud data platform.
• Lead Risk Management Framework and Authority to Operate activities.
• Translate security requirements into technical controls and executable engineering work.
• Automate compliance evidence, control validation, monitoring, and reporting where practical.
• Integrate security into infrastructure, software-delivery pipelines, and platform operations.
• Partner with engineers to identify risks, resolve findings, and improve the platform's security posture.
• Maintain authorization documentation and communicate technical risk to government and program leadership.

Skills

Security engineering

Cloud security

DevSecOps

DoD RMF/ATO

NIST controls

Automation / IaC

Engineer collaboration

Education

Bachelor's degree in cybersecurity, computer science, engineering

Equivalent practical experience

Job description

LMI is seeking a Staff Security & Compliance Engineer to build security and authorization into a U.S. Army enterprise data platform.

This is an engineering role focused on making secure delivery repeatable. The successful candidate will lead the platform's authorization effort while working directly with engineers to automate controls, evidence collection, continuous monitoring, and remediation.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors-helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

Responsibilities

Own the security-engineering and authorization approach for a secure cloud data platform.

• Lead Risk Management Framework and Authority to Operate activities.
• Translate security requirements into technical controls and executable engineering work.
• Automate compliance evidence, control validation, monitoring, and reporting where practical.
• Integrate security into infrastructure, software-delivery pipelines, and platform operations.
• Partner with engineers to identify risks, resolve findings, and improve the platform's security posture.
• Maintain authorization documentation and communicate technical risk to government and program leadership.

Minimum Qualifications

• Bachelor's degree in cybersecurity, computer science, engineering, or a related field, or equivalent practical experience.
• Eight or more years of experience in security engineering, cloud security, DevSecOps, or federal authorization.
• Demonstrated experience leading DoD RMF and ATO activities.
• Strong knowledge of NIST security controls and federal cybersecurity requirements.
• Experience securing cloud-hosted or enterprise platforms.
• Experience using automation, scripting, infrastructure as code, or security tooling to implement and validate controls.
• Ability to work directly with software, platform, and data engineers.
• Active Secret clearance.

Preferred Qualifications

• Experience supporting the U.S. Army.
• Experience with AWS or another secure government cloud environment.
• Familiarity with policy as code, automated evidence collection, and continuous authorization.
• Experience with container security, vulnerability management, identity, logging, or cloud-security tooling.
• CISSP, Security+, or another relevant cybersecurity certification.

Target salary range: $121,000 - 194,000

Disclaimer: The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.

Job Locations

US-VA-Newport News

LMI is an Equal Opportunity Employer. LMI is committed to the fair treatment of all and to our policy of providing applicants and employees with equal employment opportunities. LMI recruits, hires, trains, and promotes people without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, pregnancy, disability, age, protected veteran status, citizenship status, genetic information, or any other characteristic protected by applicable federal, state, or local law. If you are a person with a disability needing assistance with the application process, please contact [e-mail]

Colorado Residents: In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.