Cybersecurity Engineer, Sr.

Context: Senior Cloud SCA-R Team Lead responsible for cybersecurity risk management and assessment support for a DoD customer, including independent validations and Continuous Monitoring (ConMon) for authorized CSPs and CSOs.

Responsibilities

• Conduct cybersecurity assessments and validations of Cloud Service Offerings (CSOs) supporting the DoD Provisional Authorization (PA) process
• Evaluate CSP documentation packages per government guidance, including key artifacts:
  • Cloud Architecture Diagram
  • System Security Plan (SSP) and SSP Addendum
  • Readiness Assessment Report (RAR)
  • System Architecture
  • Security Assessment Plan (SAP) and Security Assessment Report (SAR)
  • Associated Plans of Action & Milestones (POA&Ms)
• Review and process additional documents for existing provisional authorizations, including:
  • Change Requests, Extension Requests, Deviation Requests, Whitelist Requests
  • Corrective Action Plans, templates, and process guide approvals
  • ConMon artifacts
• Prepare and deliver up to 30 Cloud Security Assessment Packages annually, including:
  • Validated cybersecurity controls
  • Certifier recommendations
  • Statement of residual risk
• Support technical kickoff activities and review preliminary documentation to assess a CSP readiness posture
• Analyze and provide detailed feedback on CSP submissions such as the RAR, SAP, SSP, and architectural diagrams
• Assess and document operational impact of authorizations, changes, and vulnerabilities on the CSP environment
• Develop Cloud Security Assessment Packages aligned to established guidelines, including SAR, POA&M, and any Deviation Requests
• Draft Authorization Recommendation Memoranda covering CSO compliance with DoD cybersecurity controls, residual risks, and technical findings
• Prepare formal DoD Provisional Authorization memoranda, covering authorization length, CSO boundary, services provided, operating conditions, DoD usage considerations, and follow-on activities
• Validate CSO controls in eMASS or other government-provided GRC tools; ensure accurate tracking in the Mission Status Report (MSR)
• Review and verify the Customer Responsibility Matrix (CRM) to ensure correct control inheritance in eMASS/GRC systems
• Upload authorization conditions as system-level POA&Ms in eMASS and monitor resolution
• Organize and associate received documentation with applicable security controls in eMASS
• Maintain and update the DoD Cloud Process Guide, including checklists, templates, forms, and guidance documents
• Assist with internal requirements and how-to guides for assessors conducting CSP validations
• Document and improve assessment procedures and validation best practices aligned with DoDI 8510.01 and the DoD Cloud Computing Security Requirements Guide (SRG)
• Support ongoing development and annual updates to DoD Cloud Assessment Process Guides as requested by the Government

Requirements

• Bachelor’s degree (IT-related field preferred)
• DoD 8570 IAM/IA Technical (IAT) Level III certification
• 8 years of overall experience in cybersecurity or network security
• US Citizenship required
• Maintain an active DoD Top Secret clearance with SCI eligibility
• Familiarity with security controls for Azure, AWS, and assorted cloud platforms
• Solid understanding of DoD RMF, DoDI 8510.01, and the DoD Cloud Computing Security Requirements Guide (SRG)
• Hands-on experience with eMASS or other government-provided GRC tools
• Familiarity with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms
• Ability to analyze complex cloud architectures and produce accurate risk assessments
• Strong technical writing and communication skills for security assessment reports and formal recommendations
• Must reside within commutable distance of Fort Meade, MD for a fully onsite schedule

Technologies

• Azure
• AWS
• eMASS
• GRC tools
• DoD Risk Management Framework (RMF)

Compensation & Location

• Location: Fort Meade, MD (onsite)
• Salary: USD 120,000 per year

Benefits

• 26 Days Paid Leave (vacation, sick, personal time, holidays)
• Performance bonuses based on individual contributions and company-wide results
• 401(k) with match: Company matches 3% with immediate vesting
• Company-paid life insurance up to $300K, plus options for additional coverage for you and dependents
• Multiple medical plans, dental, vision, FSA and HSA options
• 15 days fully paid leave for new parents
• Military Differential Pay for active duty employees
• Paid training and certifications, tuition reimbursement, and tools/tech to perform the role
• If the company is sold: CEO committed to returning 80% of net proceeds to employees

About AGE Solutions

• Technology and professional services company supporting U.S. government, defense, and intelligence sectors
• Provides in-depth consulting, advanced technology solutions, and essential services
• Focus on innovation and client-focused solutions to support major agencies and enhance security outcomes