> Markdown version of [/jobs/ext/4201266-dow-information-systems-security-manager-cloud-on-site](https://www.wearedevelopers.com/jobs/ext/4201266-dow-information-systems-security-manager-cloud-on-site). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# DoW Information Systems Security Manager - Cloud (On-site)

- **Company:** Tetrad Digital Integrity LLC
- **Location:** Arlington, VA, United States
- **Experience:** Expert
- **Salary:** $165,000.0 - $215,000.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Kubernetes Security, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Cyber Security, Identity and Access Management, Information Security Management, Systems Development Life Cycle, Software Engineering, Systems Integration, Google Cloud, SARS Software Products, Cloud Platform System, Large Language Models, Generative AI, Amazon Virtual Private Cloud (VPC), Containerization, Kubernetes, Information Technology, Machine Learning Operations, Devsecops, Docker, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** October 19, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=534641b2d3ebd769

## About the Role

* Active Top Secret security clearance.
 * Advanced proficiency for Information System Security Manager IAW DoD 8140.
 * Bachelor's degree in Cybersecurity, Computer Science, or Information Technology, and 8+ years of cybersecurity experience, including demonstrated experience supporting Risk Management Framework (RMF) activities for Department of War (DoW) systems.
 * Experience leading the Assessment and Authorization processes from start to finish in classified DoW environments.
 * Candidates should have practical, hands-on experience with at least one cloud platform, including AWS, Microsoft Azure, or Google Cloud Platform (GCP), with demonstrated experience in IAM, VPC/networking, Kubernetes, and cloud security services.
 * Knowledge of containerized environments (e.g., Docker, Kubernetes) and container security best practices.
 * Familiarity with Generative AI technologies, including LLMs and AI/ML security considerations.
 * Deep understanding of NIST SP 800-53, DoD RMF, FedRAMP, and other relevant cybersecurity frameworks.
 * Experience writing and maintaining RMF artifacts such as SSPs, POA&Ms, and SARs.
 * Strong communication skills and ability to collaborate effectively with technical and non-technical stakeholders.
 * Experience with security risk assessments in DoW environments, * Advanced cloud security certifications, such as Google Professional Cloud Security Engineer, Cloud Certified Security Professional or Azure equivalent.
 * Experience integrating DevSecOps pipelines with RMF compliance processes.
 * Familiarity with automation tools for RMF documentation and control testing (e.g., Xacta, eMASS, OpenRMF).

## Description

* Lead and support RMF activities throughout all phases (categorization, control selection, implementation, assessment, authorization, and continuous monitoring).
 * Provide expert guidance on DoW cloud security policies, NIST SP 800-53 controls, CNSS policies, and DoW-specific frameworks such as Cloud Computing SRG and AI-specific guidance.
 * Conduct security architecture reviews and security engineering analysis for cloud-native and containerized workloads.
 * Evaluate security controls associated with Kubernetes, Docker, and container orchestration platforms.
 * Assess security risks related to generative AI components, including large language models (LLMs) and AI/ML workloads, ensuring responsible and compliant use.
 * Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plan of Action and Milestones (POA&Ms), and related RMF documentation.
 * Perform threat modeling, vulnerability assessments, and risk analysis tailored to cloud environments and AI technologies.
 * Interface with system architects, developers, and DevSecOps teams to integrate security throughout the Software Development Lifecycle (SDLC).
 * Lead the compliance team through security control assessments (SCAs) and coordinate with third-party assessors.
 * Monitor, track, and report on security compliance posture through Continuous Monitoring (ConMon) processes.
 * Minimal travel will be required.