Cloud Security Engineer, Senior

TIAG•Bethesda, MD

19d•$125,000 - $145,000•Hybrid

About The Position

TIAG is seeking a Senior Cloud Security Engineer to drive technical discovery, gap analysis, and security architecture validation for modernization of Authorization to Operate (ATO) packages. The role evaluates and secures Google Cloud, Google Workspace, and ServiceNow GCC-High environments as they transition from legacy NIST SP 800-53 Revision 3 baselines to NIST SP 800-53 Revision 5 and DoD Impact Level 4 (IL-4) standards. The position is based at the Uniformed Services University of the Health Sciences (USUHS) customer site in Bethesda, Maryland, in a hybrid capacity, and reports to the customer site. An active Secret clearance is required to start work; U.S. or naturalized citizenship is required. The engineer identifies technical differences between legacy control documentation, DISA eMASS baseline assumptions, and actual cloud configurations; evaluates CSP FedRAMP packages to determine inherited, shared, and Agency-implemented controls; and validates assumptions using system access, technical documentation, and interviews with Government personnel. The role documents control gaps, risks, and recommended remediation dispositions without changing production configurations, and validates evidence supporting control implementation. The engineer also provides technical input for Risk Management Framework (RMF) artifacts, ensuring control narratives accurately reflect the cloud architecture. They conduct human-in-the-loop validation of AI-assisted technical content and produce key reports, including the DoD IL-4 Gap Analysis Report for Google environments and the ServiceNow GCC-High Technical Alignment Report.

Requirements

Active DoD Secret clearance required.
U.S. or naturalized citizenship required.
DoD 8140/8570 IAT Level III or IASAE Level II/III certification required, such as CISSP, CASP+ CE, or CSSLP.
Advanced cloud security or architecture certification required, such as Google Cloud Professional Security Engineer, CCSP, or Google Cloud Professional Cloud Architect.
At least 8 years of relevant cloud security engineering and cybersecurity architecture experience, with a strong background in securing enterprise cloud environments.
Deep technical understanding of Google Cloud, Google Workspace, and ServiceNow GCC-High architectures and native security capabilities.
Advanced expertise applying NIST SP 800-53 Revision 5 controls, DoD IL-4 parameters, and FedRAMP inheritance models to complex cloud environments.
Ability to translate complex technical cloud configurations into clear, compliant control narratives and RMF evidence.
Ability to work cross-functionally with the Cyber Security Analyst, Senior ISSE, and Senior ServiceNow GRC Specialist.

Responsibilities

Evaluate Google Cloud, Google Workspace, and ServiceNow GCC-High environments against NIST SP 800-53 Revision 5 and DoD Cloud Computing Security Requirements Guide IL-4 requirements.
Analyze technical implementations to identify differences between legacy control documentation, DISA eMASS baseline assumptions, and actual Agency cloud configurations.
Evaluate Google and ServiceNow CSP FedRAMP security packages to identify inherited controls and shared or Agency-implemented responsibilities.
Validate technical assumptions through system access, technical configuration documentation, and interviews with Government personnel.
Identify cloud security control gaps, document associated risks, and recommend future remediation dispositions without altering production configurations.
Collect, review, and validate technical evidence, including configuration screenshots, system-generated reports, and log exports.
Provide technical engineering input for RMF artifacts and ensure implementation-specific control narratives accurately reflect cloud architecture.
Conduct human-in-the-loop validation of AI-assisted technical content for architectural and configuration accuracy and alignment with Rev 5 and IL-4 requirements.
Deliver the DoD IL-4 Gap Analysis Report for Google environments and the ServiceNow GCC-High Technical Alignment Report.
Work cross-functionally with the Cyber Security Analyst, Senior ISSE, and Senior ServiceNow GRC Specialist to deliver cohesive authorization packages.