Cybersecurity Engineer, Sr. (Cloud SCA-R)

AGE Solutions • Fort Meade, MD

11d • $120,000 • Onsite

About The Position

AGE Solutions is seeking a Senior Cloud SCA-R to support an upcoming cybersecurity risk management and assessment program for a Department of Defense customer. As a team lead, the role performs analysis, independent assessment validations, and continuous monitoring for authorized Cloud Service Providers (CSPs) and Cloud Service Offerings (CSOs). The position is fully onsite and requires candidates to live within commuting distance of Fort Meade, Maryland.

The role conducts cloud security assessments in support of the DoD Provisional Authorization process, reviews CSP documentation and control evidence, validates controls in government-provided Governance, Risk, and Compliance tools, and prepares assessment packages and authorization recommendations. It also contributes to assessment guidance, procedures, templates, and process documentation. The projected salary is $120,000 or more annually; final compensation depends on relevant experience, clearance, certifications, technical skills, contract requirements, and overall qualifications.

Requirements

• Bachelor's degree; an IT-related field is preferred.
• DoD 8570 IAM/IA Technical (IAT) Level III certification.
• Eight years of overall experience in a cybersecurity or network security position.
• U.S. citizenship.
• Must have and maintain an active DoD Top Secret clearance with SCI eligibility.
• Familiarity with security controls for Azure, AWS, and other cloud platforms.
• Solid understanding of the DoD Risk Management Framework, DoDI 8510.01, and the DoD Cloud Computing Security Requirements Guide.
• Hands-on experience with eMASS or other government-provided GRC tools.
• Familiarity with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms.
• Ability to analyze complex cloud architectures and provide accurate risk assessments.
• Strong technical writing and communication skills to produce security assessment reports and formal recommendations.
• Must reside within commuting distance of Fort Meade, Maryland, for a fully onsite schedule.

Responsibilities

• Conduct cybersecurity assessments and validations of Cloud Service Offerings in support of the DoD Provisional Authorization process.
• Evaluate CSP documentation packages against government guidance and procedures, including architecture diagrams, SSPs and addenda, RARs, SAPs, SARs, and POA&Ms.
• Review and process change, extension, deviation, and whitelist requests; corrective action plans; process-guide approvals; and continuous-monitoring artifacts for existing Provisional Authorizations.
• Prepare and deliver up to 30 Cloud Security Assessment Packages annually, including validated cybersecurity controls, certifier recommendations, and statements of residual risk.
• Participate in technical kickoff meetings and review preliminary documentation to assess CSP readiness.
• Analyze CSP submissions, including RARs, SAPs, SSPs, and architectural diagrams, and provide detailed feedback.
• Assess and document the operational impact of authorizations, changes, and vulnerabilities on CSP environments.
• Develop Cloud Security Assessment Packages in accordance with established guidelines, including SARs, POA&Ms, and deviation requests.
• Draft Authorization Recommendation Memoranda addressing CSO compliance with DoD cybersecurity controls, residual risks, and technical findings.
• Prepare formal DoD Provisional Authorization memoranda detailing authorization length, CSO boundary, services, operating conditions, DoD usage considerations, and follow-on activities.
• Validate CSO controls in eMASS or other government-provided GRC tools and ensure accurate tracking in the Mission Status Report.
• Review and verify Customer Responsibility Matrices and ensure control inheritance is properly reflected in eMASS or other GRC systems.
• Upload authorization conditions as system-level POA&Ms in eMASS and monitor their resolution.
• Organize and associate received documentation with applicable security controls in eMASS.
• Maintain and update the DoD Cloud Process Guide, including checklists, templates, forms, and guidance documents.
• Help develop internal requirements and how-to guides for assessors conducting CSP validations.
• Document and refine assessment procedures and validation best practices to align with DoDI 8510.01 and the DoD Cloud Computing Security Requirements Guide.
• Contribute to the development and annual updates of DoD Cloud Assessment Process Guides as requested by the Government.

Benefits

• 26 days of paid leave, including vacation, sick, personal time, and holidays.
• Performance bonuses based on individual contributions and company-wide results.
• 401(k) with a 3% company match and immediate vesting.
• Company-paid life insurance up to $300,000, with options for additional coverage.
• Multiple medical plans, dental and vision coverage, and FSA and HSA options.
• 15 days of fully paid parental leave.
• Military differential pay for employees on active duty.
• Paid training and certifications, tuition reimbursement, and tools and technology for the job.
• The CEO has committed to returning 80% of net proceeds to employees in the event of a company sale.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior