Note: The job is a remote job and is open to candidates in USA. DecisionPoint Corporation seeks a Cloud Security & Compliance Engineer to support cybersecurity compliance, RMF alignment, and IL5 cloud security operations for AWS GovCloud environments supporting a federal and DoD-aligned mission. The role maintains RMF documentation and STIG compliance, validates cloud security configurations, supports continuous monitoring and vulnerability remediation, and assists with audits, assessments, migration security validation, and ATO-related activities.
Responsibilities
- Perform RMF impact analysis for system changes affecting cloud security posture
- Update and maintain RMF documentation including SSPs, POA&Ms, SARs, and control evidence
- Ensure STIG compliance for cloud services, operating systems, containers, and supporting components
- Validate encryption configurations, IAM changes, auditing controls, and logging requirements
- Support continuous monitoring, vulnerability management, and remediation tracking
- Assist with IL5 migration security validation, ensuring no degradation of compliance during transitions
- Review configuration baselines, IaC templates, and cloud security policies for alignment with RMF and Zero Trust
- Conduct log analysis and correlate findings with SIEM outputs for compliance and incident follow-up
- Support COOP/DR planning from a security controls perspective, ensuring continuity of protections
- Assist ISSM and ISSO teams during audits, assessments, and ATO-related activities
- Document security findings, remediation steps, and compliance reports for leadership review
- Participate in Change Control Board (CCB) meetings to evaluate security impacts of proposed updates
Skills
- Must hold an **active Top Secret clearance**, supported by a **Tier 5** background investigation
- Bachelor's degree in Computer Science, Information Technology, Systems Administration, or a related field
- Minimum **5 years** of experience in cloud security, cybersecurity compliance, or system security engineering
- Experience performing RMF support activities including SSP updates, POA&M management, and continuous monitoring
- Experience validating compliance against STIGs, IL5 configurations, and federal security controls
- Experience troubleshooting cloud security issues in AWS or secure federal environments
- Familiarity with AWS GovCloud IL5 security controls, logging, monitoring, and IAM best practices
- Knowledge of RMF processes, STIG requirements, and federal cybersecurity frameworks
- Understanding of encryption, auditing, IAM, and boundary defense in cloud environments
- Familiarity with vulnerability scanning, remediation workflows, and compliance validation
- CompTIA Security+ or AWS Cloud Practitioner
- Strong analytical and problem-solving abilities for cloud security and compliance issues
- Excellent communication skills for coordination with cybersecurity and engineering teams
- High attention to detail in documentation and RMF artifact maintenance
- Ability to manage multiple tasks and deadlines in a mission-focused environment
- Strong understanding of secure cloud operations and IL5 compliance
- Experience with automation for compliance validation or policy-as-code
- Experience with SIEM platforms, SOAR tools, or security analytics
- Familiarity with container hardening and cloud-native security architectures
- ITIL v4 Foundation
- AWS Security Specialty
- CISSP, CCSP, or other advanced cybersecurity certifications
Benefits
- Fully remote work arrangement
Company Overview