Cloud Security Engineer (AWS) - TS/SCI - On-Site SCIF

D9Tech Resources, LLC is hiring in support of a national security cloud program. Secure and help authorize classified AWS environments. You will engineer IAM, KMS and logging guardrails, run security tooling, drive RMF/ATO work and close POA&M findings across mission projects. All work is performed on-site in a SCIF.

Responsibilities

• Design IAM, KMS and logging guardrails for classified workloads
• Administer and secure artifact repository services (Sonatype Nexus Repository)
• Build and tune OpenSearch Dashboards as a SIEM and logging platform
• Remediate POA&M items, including MFA implementation
• Support NIST 800-53/RMF controls, STIG compliance and POA&M tracking
• Produce and maintain ATO packages and documentation
• Perform architecture and code reviews, vulnerability assessments and incident response support

Active TS/SCI clearance, eligible for SCI read-on/INDOC and SAP indoctrination where required

• Live within commuting distance of a SCIF in Herndon, VA, Washington, DC, Seattle, WA or Denver, CO
• Able and willing to work on-site in a SCIF on a regular basis, including at customer facilities
• 5+ years in cybersecurity or security engineering, including 3+ years securing AWS environments
• RMF/ATO experience in DoD or IC environments
• Hands-on experience with AWS cloud services
• Experience in air-gapped or classified environments with no public internet access and controlled change management (CCB)
• DoD 8140/8570 IAT Level II or higher certification (e.g., Security+, CISSP) where applicable, Experience in AWS GovCloud and/or classified AWS regions (C2S/SC2S)
• AWS Certified Solutions Architect, DevOps Engineer, Advanced Networking or Security Specialty
• Nexus Repository and OpenSearch experience
• CISSP

Reminder: On-site in a SCIF, customer-facing. Remote and hybrid candidates will not be considered.