In this role you will advance cloud security for the USAF Cloud One Architecture, focusing on secure AWS SIPRNet environments. You will collaborate with cross-functional teams to implement and sustain authorization, risk management, and compliance workflows. You will drive automated vulnerability scanning, reporting, and remediation to support ATO readiness and system resiliency. The position offers impact at a global scale within a mission-driven context and exposure to cutting-edge security tooling. You will work closely with stakeholders to shape secure, cost-efficient cloud operations.
Responsibilities
Design, deploy, and maintain ATO-ready configurations for AWS SIPRNet within the C1 Architecture
Serve as SME for system design, builds, and ATO efforts across cybersecurity requirements and tooling
Operate and maintain compliance tools (ACAS/Nessus, AWS Inspector, AWS Security Hub) and detect misconfigurations and threats
Monitor logging and event tools (CloudTrail, AWS Config, GuardDuty) and other cloud-native services
Document mitigations, compile scan exports, and generate vulnerability reports with POA&M
Continuously monitor resources via automated scans and reporting feeds for cybersecurity authorization
Ensure compliance with SCCA, Cloud Computing SRG, and STIG/SRG requirements
Create RMF-required documentation and support ATO sustainment, verify patching, and remediation
Plan and execute enterprise vulnerability and compliance scanning; coordinate STIG checklists
Prepare technical briefs and collaborate with teammates; mentor junior staff
Key requirements
Bachelor with 8+ years of relevant experience or Master with 6+ years
6+ years of experience with cloud-hosted systems
U.S. citizenship and active DoD Secret clearance
DoD 8570/8140 IAT Level II baseline certification
AWS Certified Security – Specialty
ACAS Certified – Supervisor/Operator
Hands-on with AWS CLI, Ansible Playbooks, Tenable Nessus
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.