Cybersecurity Engineer - Cloud

SAIC • Colorado Springs, CO

1d • Onsite

About The Position

SAIC is a trusted leader in delivering advanced command and control capabilities across the Department of the Air Force, bringing deep expertise in how cutting edge technologies are engineered, secured, and delivered to the fight. At the center of this mission, the Common Mission Control Center (CMCC) unifies data, sensors, mission applications, cloud based services, and emerging AI enabled automation to give warfighters a decisive edge—turning complex, multidomain information into fast, clear, and actionable decisions in the moments that matter most. The CMCC System Facilitator contract positions SAIC to accelerate how new capabilities are integrated, tested, secured, and transitioned into operational use, working side by side with operators, engineers, Capability Providers, and government teams to ensure every delivery strengthens mission readiness. This effort offers the chance to directly shape how the Air Force sees, decides, and acts across all domains—making a tangible and immediate impact on warfighter effectiveness.
The Cybersecurity Engineer (Cloud) secures and accredits CMCC’s multi tenant cloud environments (Dev, Integration, Test). The role implements JSIG/NIST/STIG baselines, engineers secure multi classification cloud designs, validates Capability Provider and External cyber artifacts, and ensures all required evidence is provided to the Infrastructure TO for Baseline updates. The Cybersecurity Engineer (Cloud) develops RMF/ATO packages for cloud environments, partners closely with DSOP, Platform, CE, and Cloud SMEs, and contributes hands on effort to early DSOP/cloud design and environment build out.

Requirements

• Implement JSIG, NIST SP 800‑53, STIG, and MLS/MILS baselines across Dev/Integration/Test cloud enclaves.
• Own RMF/ATO packages for cloud environments, producing SSP, POA&M, and full RMF evidence.
• Validate STIG, ACAS/Nessus, SAST/DAST, and container‑security outputs prior to environment promotion.
• Perform functional validation of CP/External cyber artifacts; coordinate delivery of validated evidence to Infrastructure TO.
• Maintain cloud‑aligned continuous monitoring, including audit logs, cloud telemetry, and Prometheus/Grafana security metrics.
• Support Cloud + DSOP joint early design efforts; collaborate to integrate pipeline‑aware cloud security.
• Validate IaC/CaC baselines (Terraform, Ansible, Helm) for secure, consistent cloud deployments and promotion gates.
• Provide cyber recommendations during CCB promotion evaluations

Responsibilities

• Build and secure multi‑tenant CMCC cloud environments.
• Implement JSIG, NIST SP 800‑53, STIG, and MLS/MILS baselines across Dev/Integration/Test cloud enclaves.
• Own RMF/ATO packages for cloud environments, producing SSP, POA&M, and full RMF evidence.
• Validate STIG, ACAS/Nessus, SAST/DAST, and container‑security outputs prior to environment promotion.
• Perform functional validation of CP/External cyber artifacts; coordinate delivery of validated evidence to Infrastructure TO.
• Maintain cloud‑aligned continuous monitoring, including audit logs, cloud telemetry, and Prometheus/Grafana security metrics.
• Support Cloud + DSOP joint early design efforts; collaborate to integrate pipeline‑aware cloud security.
• Validate IaC/CaC baselines (Terraform, Ansible, Helm) for secure, consistent cloud deployments and promotion gates.
• Provide cyber recommendations during CCB promotion evaluations

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed