> Markdown version of [/jobs/ext/476320-cloud-cybersecurity-specialist-senior](https://www.wearedevelopers.com/jobs/ext/476320-cloud-cybersecurity-specialist-senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Cybersecurity Specialist - Senior - **Company:** BDR Solutions - **Location:** United States - **Experience:** Expert - **Salary:** $100,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Amazon Web Services, Cloud Computing, Cloud Computing Security, CompTIA Security+, Cyber Security, Identity and Access Management, Python (Programming Language), Information Technology Security Auditing, Security Information and Event Management, Software Vulnerability Management, Cloud Platform System, Amazon Virtual Private Cloud (VPC), Git, Information Technology, Performance Monitor, RSA Archer Platform, Terraform, Splunk, Qualys, Servicenow, Databricks - **Published:** June 8, 2026 - **Apply:** https://www.clearancejobs.com/jobs/8961990/cloud-cybersecurity-specialist-senior ## About the Role * Active IRS or Treasury cybersecurity contract experience strongly preferred * 5+ years in FedRAMP High or comparable high-security AWS cloud environments * AWS Certified Security - Specialty strongly preferred * CISSP, CCSP, or CompTIA Security+ (current) * In-depth knowledge of NIST SP 800-53 Rev 5 and IRS Publication 4812 * POA&M management and structured GRC environment experience * AWS security tooling: Security Hub, GuardDuty, CloudTrail, Config, IAM Access Analyzer * Experience supporting formal ATO processes and continuous monitoring programs * Working knowledge of OSCAL format for security control documentation * Comfort with a 75% contract engagement; may hold other concurrent work * Bachelor's degree in Cybersecurity, Information Technology, or related field ## Description BDR Solutions LLC is seeking an experienced Cloud Cybersecurity Specialist to provide security oversight for a high-security IRS AWS and Databricks environment. This role is responsible for monitoring platform security, supporting ATO and continuous monitoring activities, and ensuring compliance with FedRAMP High, NIST 800-53, and IRS security standards. The ideal candidate will bring strong expertise in AWS security tooling, incident response, and GRC practices, while partnering directly with federal stakeholders to manage risk, oversee POA&M activities, and maintain a secure, compliant cloud infrastructure., * Active MBI - mandatory; candidates in process do NOT qualify, * Provide platform security oversight for IRS EDP in direct partnership with IRS federal security personnel * Monitor AWS/Databricks telemetry for security anomalies, IAM misconfigurations, and stale credentials * Review network controls, PrivateLink configurations, and VPC security architecture; maintain centralized alerting * Coordinate incident response for security events and serve as key liaison to IRS CSIRC * Lead entitlement reviews, key/certificate rotation, and encryption compliance oversight * Provide senior security guidance on POA&M remediation and security control implementation * Support DR/COOP tests and security audit activities alongside the Cybersecurity Analyst * Support IRS ATO renewal and continuous monitoring activities throughout the period of performance Tools and Platforms: * AWS security services (Security Hub, GuardDuty, CloudTrail, Config, IAM) * SIEM tools (Splunk, ELK), GRC/ATO platforms (eMASS, Archer, ServiceNow GRC) * Vulnerability management tools (Tenable, Qualys, Inspector) * Experience with Terraform, Git, and Databricks/Lake Formation security controls. Clearance Required: * Minimum Background Investigation (MBI) - ACTIVE Nice to Have Qualifications: * Experience with eMASS or GRC platforms * AWS Organizations and Control Tower * Advanced VPC/PrivateLink architectures * OSCAL implementation * Databricks security * SIEM tools (Splunk/ELK) * Automation using Python or Terraform. In addition, U.S Citizenship is required. Select applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information and be able to obtain a government-granted security clearance. Individuals may also be subject to a background investigation including, but not limited to criminal history, employment and education verification, drug testing, and creditworthiness. This position is contingent upon contract award. Employment is not guaranteed and will proceed only if the associated contract is awarded and funded. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Stop Committing Your Secrets - GIt Hooks To The Rescue!](https://www.wearedevelopers.com/videos/573-stop-committing-your-secrets-git-hooks-to-the-rescue) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)