Secret / TS Cyber Lead – Cloud & RMF

Required Skills & Experience

Required Qualifications

• Active DoD Secret security clearance (must be able to maintain).
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• Minimum 8 years of hands-on cybersecurity experience.
• Demonstrated experience leading cyber or cloud security efforts and/or small technical teams.
• Strong customer facing skills, including:
• Experience presenting to government stakeholders and senior leadership.
• Ability to clearly communicate complex security topics and trade offs.
• Deep understanding of DoD/Federal cybersecurity policy and RMF (NIST 800 53, DoD RMF); proven experience supporting or leading ATO efforts and managing POA&Ms.
• Experience with cloud security, particularly Microsoft Azure, including:
• Azure security and monitoring tools (e.g., Microsoft Defender for Cloud, Microsoft Sentinel, Defender for Endpoint).
• Azure networking, identity (Azure AD / Entra ID), policies, and logging/monitoring.
• Hands on experience with multiple cybersecurity tools such as SIEM, EDR, vulnerability management, and other monitoring platforms.
• Familiarity with Zero Trust principles and reference architectures.
• Strong written and verbal communication skills, including briefing materials and technical documentation.
• Ability and willingness to work onsite at the Mark Center in Alexandria, VA, Monday–Friday.

70-100H Exact compensation may vary based on several factors, including skills, experience, and education. Employees in this role will enjoy a comprehensive benefits package starting on day one of employment, including options for medical, dental, and vision insurance. Eligibility to enroll in the 401(k) retirement plan begins after 90 days of employment. Additionally, employees in this role will have access to paid sick leave and other paid time off benefits as required under the applicable law of the worksite location.

Nice to Have Skills & Experience

• Experience supporting DoD programs or federal customers in IL4/5/6 cloud environments.
• Experience with eMASS and formal RMF/ATO workflows for DoD systems.
• Experience with Infrastructure as Code (IaC) and automation (e.g., ARM/Bicep, Terraform) and scripting (e.g., PowerShell, Python).
• Knowledge of containers/orchestration (e.g., AKS, Kubernetes) and related security controls.
• Relevant certifications (e.g., AZ 500, SC 100/200/300, CISSP, CCSP, Security+, or DoD 8570/8140 baseline certs).

Job Description

Seeking a Cyber Lead to provide technical leadership and customer-facing support for secure cloud and on prem environments, with a focus on Microsoft Azure and DoD missions. This role combines hands-on cyber engineering, RMF/ATO leadership, and direct engagement with senior stakeholders. The Cyber Lead will guide a small team, drive security strategy and execution, and present status, risks, and recommendations to our government customers.

Key Responsibilities

• Serve as the primary cyber point of contact for the customer, providing clear, confident, and professional communication in meetings, briefings, and working sessions.
• Lead a cybersecurity team responsible for RMF, ATO packages, POA&M management, and continuous monitoring for on prem and cloud hosted systems.
• Design, implement, and maintain secure cloud architectures in Microsoft Azure, with emphasis on DoD IL4/5/6 environments and related security/compliance requirements.
• Lead or support the design and implementation of Zero Trust–aligned solutions, including identity centric security, network segmentation, data protection, and continuous monitoring.
• Oversee integration and operation of cybersecurity toolsets across cloud and on prem environments (e.g., SIEM, EDR, CSPM/CIEM, vulnerability management, logging/monitoring, SOAR).
• Ensure high quality RMF and ATO documentation (SSPs, SARs, PCIAs, etc.) and strong POA&M lifecycle management to support timely authorization and sustainment.
• Guide the development and execution of a cloud/cybersecurity roadmap to mature the security posture over time.
• Provide technical direction and mentoring to team members on policies, RMF, monitoring tools, and cloud security best practices.
• Support and lead customer presentations and briefings on security status, risks, mitigations, and recommendations, tailoring content for both technical and non technical audiences.
• Coordinate with architecture, operations, and DevSecOps teams to ensure security by design and consistent implementation of standards and reference architectures.