AWS Cloud Security and Accreditation Specialist

Diné Development Corporation

15d

About The Position

Serves as the AWS Cloud Security and Accreditation Specialist for pre-production modernization efforts. This position combines responsibility for designing, implementing, securing, accrediting, and scaling cloud-hosted environments supporting development, test, integration, and future production operations. The AWS Cloud Security and Accreditation Lead serves as the primary cybersecurity and cloud subject matter expert responsible for managing AWS GovCloud environments while leading all Risk Management Framework (RMF), Interim Authority to Test/Connect (IATT-C), and Authority to Operate (ATO) activities. The position provides technical guidance throughout the acquisition lifecycle, ensuring cloud architectures are secure, compliant, scalable, and aligned with Department cybersecurity requirements. The successful candidate will work closely with engineering, infrastructure, and program leadership teams to implement secure cloud-native solutions supporting modern databases, Java applications, APIs, CI/CD pipelines, Zero Trust architectures, Identity Credentialing and Access Management (ICAM), and future modernization initiatives. This position is contingent upon contract award. Award anticipated December 2026/January 2027.

Requirements

10 Years of Experience
BS in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, or a closely related discipline, or equivalent additional relevant experience.
Secret Clearance Requirements
Demonstrated experience obtaining IATT-C and ATO accreditations, including ownership of package development, submission, review, and approval processes.
Demonstrated experience with DoD Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities.
Demonstrated experience securing, accrediting, and administering AWS cloud environments.
Demonstrated experience performing technical and functional decomposition supporting modernization solutions and implementing modern database, cloud, and software technologies within the Federal Government, specifically DoD environments.

Nice To Haves

AWS Solutions Architect Associate (or higher)
AWS Cloud Practitioner
Security+
CISSP
AI/ML experience

Responsibilities

Design, provision, secure, administer, and manage AWS GovCloud environments and accounts supporting development, test, and integration activities.
Establish and maintain cloud landing zones, IAM boundaries, security controls, and network segmentation within a regulated government environment.
Scale prototype environments into full pre-production environments capable of supporting future production operations.
Engineer cloud-hosted solutions supporting relational databases, modern software applications, APIs, cloud-native services, microservices architectures, CI/CD pipelines, and modern UI/UX capabilities.
Implement Infrastructure as Code (IaC), automated environment provisioning, container orchestration, and cloud-native deployment practices.
Support protection, detection, monitoring, and response requirements for systems and data hosted within AWS.
Contribute cloud architecture content to enterprise architecture artifacts, technical documentation, and solution designs.
Lead accreditation efforts for cloud-hosted environments in accordance with NIST 800-37 Revision 5 and DoD RMF requirements.
Prepare, manage, and submit IATT-C and ATO accreditation packages.
Develop and maintain assessment and authorization artifacts required to obtain and sustain system authorization.
Implement and validate RMF security controls across cloud environments.
Apply cybersecurity concepts, policies, and Department requirements to AWS-hosted solutions.
Support cybersecurity vulnerability assessments and remediation activities.
Manage POA&M development, security findings, risk mitigation strategies, and continuous monitoring activities.
Serve as principal liaison for cybersecurity reviews, boundary defense initiatives, and cloud security assessments.
Ensure alignment with DoD Cyber Strategy, DoD Cyber Workforce Strategy, and DoD Zero Trust Strategy.
Support Zero Trust (ZT) and Identity Credentialing and Access Management (ICAM) integration activities.
Provide cybersecurity and cloud engineering guidance during project reviews, stakeholder meetings, and technical planning sessions.
Communicate cybersecurity risks, recommendations, and mitigation strategies to program leadership.
Support cloud migration, legacy system modernization, data migration, and technology transition efforts.
Support modernization activities involving modern databases, cloud-native architectures, and modern software development practices.