Cybersecurity Engineer - Cloud
- Flexwork, CO, United States
- Chantilly, VA, United States
- Beale AFB, CA, United States
Applications open in a new tab.
Job details
- Posting language
- English
- Posted
Original job description
SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force. Working alongside operators, engineers, Capability Providers, and government stakeholders, SAIC helps accelerate the delivery of interoperable capabilities that enhance mission effectiveness.
SAIC is seeking a Cloud Cybersecurity Engineer to support the security, accreditation, and continuous monitoring of cloud environments that enable development, integration, testing, and operational activities across the ecosystem. This role works closely with Cloud, Infrastructure, DevSecOps, Integration, and Government Cyber teams to maintain secure cloud environments that support Capability Providers and enable rapid delivery of mission capabilities to the warfighter.
The successful candidate will focus on Continuous Monitoring (ConMon), RMF package maintenance, vulnerability management, security assessments, ATO sustainment, and implementation of cybersecurity controls across classified and multi-classification cloud environments. This position plays a critical role in ensuring cloud environments remain secure, compliant, and available for capability development, integration, and testing activities.
Job Duties Include
- Support security and accreditation activities across cloud, hybrid-cloud, and multi-classification environments.
- Maintain RMF artifacts including SSPs, POA&Ms, security control implementations, assessment documentation, and accreditation evidence.
- Execute Continuous Monitoring (ConMon) activities and maintain cybersecurity posture across cloud environments.
- Perform vulnerability management activities including review, validation, tracking, and remediation of ACAS, Nessus, STIG, container, and infrastructure findings.
- Implement and validate JSIG, NIST SP 800-53, STIG, and program cybersecurity requirements. Support security assessments, audits, inspections, and Security Control Assessor (SCA) activities.
- Validate security evidence supporting environment deployments, upgrades, and operational use.
- Review Infrastructure as Code (IaC) and Configuration as Code (CaC) implementations to ensure cybersecurity requirements are properly incorporated.
- Support secure cloud architectures, multi-level security (MLS/MILS) environments, and Cross Domain Solution (CDS) integration efforts.
- Coordinate with Cloud, Infrastructure, DevSecOps, and Engineering teams to identify and mitigate cybersecurity risks.
- Support cloud ATO maintenance, reassessments, environment promotions, and cybersecurity reviews. Identify opportunities to improve cybersecurity automation, compliance monitoring, and overall security posture.
Required Qualifications
- Bachelor's degree and nine (9) years or more related experience; OR Master's degree and seven (7) years or more of related experience; OR PhD and four (4) years or more of related experience.
- TS/SCI clearance and U.S. citizenship.
- DoD 8140 compliant cybersecurity certification (CISSP, CASP+, CCSP, Security+, or equivalent).
- Experience supporting RMF, ATO, SSP, POA&M, Continuous Monitoring (ConMon), and cybersecurity accreditation activities.
- Experience implementing and validating NIST 800-53, JSIG, STIG, and related DoD cybersecurity requirements.
- Experience performing vulnerability assessments and remediation activities using ACAS, Nessus, STIG Viewer, or similar tools.
- Experience supporting cloud, virtualization, Kubernetes, containerized, or classified cloud environments from a cybersecurity perspective.
Desired Qualifications and Experience
- Experience supporting classified cloud environments within DoD or Intelligence Community organizations.
- Experience supporting SC2S, GovCloud, Platform One, Azure Government, or similar government cloud environments.
- Experience supporting MLS/MILS architectures, Cross Domain Solutions (CDS), or multi-classification environments.
- Experience supporting cloud ATOs, reassessments, security audits, or SCA reviews.
- Experience reviewing Infrastructure as Code (Terraform, Ansible, Helm) from a cybersecurity perspective.
- Experience supporting Kubernetes, RKE2, containerized environments, or cloud-native platforms.
- Experience supporting DevSecOps, cloud security automation, or continuous authorization initiatives.
- Familiarity with Zero Trust architecture, PKI, identity management, and cloud security best practices.
- Experience supporting DoD command and control, battle management, air operations, space operations, or other mission systems.
SAIC® is a premier mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, intelligence, and civilian markets includes secure high-end solutions in mission IT, enterprise IT, engineering services, and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives.
We are approximately 23,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.3 billion. For more information, visit saic.com. For ongoing news, please visit our newsroom.