Cybersecurity Engineer - Cloud

SAIC•Colorado Springs, CO

About The Position

SAIC is seeking a Cloud Cybersecurity Engineer to support the security, accreditation, and continuous monitoring of cloud environments used for development, integration, testing, and operational activities. The role works with Cloud, Infrastructure, DevSecOps, Integration, Engineering, and Government Cyber teams to maintain secure environments that support Capability Providers and the delivery of mission capabilities. The position focuses on Continuous Monitoring (ConMon), Risk Management Framework (RMF) package maintenance, vulnerability management, security assessments, Authority to Operate (ATO) sustainment, and implementation of cybersecurity controls across classified and multi-classification cloud environments. It helps ensure those environments remain secure, compliant, and available for capability development, integration, and testing.

Requirements

Bachelor's degree and at least 9 years of related experience, or a master's degree and at least 7 years of related experience, or a PhD and at least 4 years of related experience.
TS/SCI clearance and U.S. citizenship.
DoD 8140-compliant cybersecurity certification, such as CISSP, CASP+, CCSP, Security+, or equivalent.
Experience supporting RMF, ATO, SSP, POA&M, Continuous Monitoring (ConMon), and cybersecurity accreditation activities.
Experience implementing and validating NIST 800-53, JSIG, STIG, and related DoD cybersecurity requirements.
Experience performing vulnerability assessments and remediation using ACAS, Nessus, STIG Viewer, or similar tools.
Cybersecurity experience supporting cloud, virtualization, Kubernetes, containerized, or classified cloud environments.

Nice To Haves

Experience supporting classified cloud environments within DoD or Intelligence Community organizations.
Experience supporting SC2S, GovCloud, Platform One, Azure Government, or similar government cloud environments.
Experience supporting MLS/MILS architectures, Cross Domain Solutions (CDS), or multi-classification environments.
Experience supporting cloud ATOs, reassessments, security audits, or SCA reviews.
Experience reviewing Infrastructure as Code such as Terraform, Ansible, or Helm from a cybersecurity perspective.
Experience supporting Kubernetes, RKE2, containerized environments, or cloud-native platforms.
Experience supporting DevSecOps, cloud security automation, or continuous authorization initiatives.
Familiarity with Zero Trust architecture, PKI, identity management, and cloud security best practices.
Experience supporting DoD command and control, battle management, air operations, space operations, or other mission systems.

Responsibilities

Support security and accreditation activities across cloud, hybrid-cloud, and multi-classification environments.
Maintain RMF artifacts, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), security control implementations, assessment documentation, and accreditation evidence.
Execute Continuous Monitoring (ConMon) activities and maintain cybersecurity posture across cloud environments.
Review, validate, track, and remediate ACAS, Nessus, STIG, container, and infrastructure vulnerability findings.
Implement and validate JSIG, NIST SP 800-53, STIG, and program cybersecurity requirements.
Support security assessments, audits, inspections, and Security Control Assessor (SCA) activities.
Validate security evidence supporting environment deployments, upgrades, and operational use.
Review Infrastructure as Code (IaC) and Configuration as Code (CaC) implementations to ensure cybersecurity requirements are incorporated.
Support secure cloud architectures, multi-level security (MLS/MILS) environments, and Cross Domain Solution (CDS) integration efforts.
Coordinate with Cloud, Infrastructure, DevSecOps, and Engineering teams to identify and mitigate cybersecurity risks.
Support cloud ATO maintenance, reassessments, environment promotions, and cybersecurity reviews.
Identify opportunities to improve cybersecurity automation, compliance monitoring, and overall security posture.