| Location | Midlothian, Virginia |
Axyde Analytics seeks a senior cloud-security engineer to support the secure transition and operation of an AWS-based federal data and AI platform handling Controlled Unclassified Information, specialized nuclear-security information, and sensitive personally identifiable information.
Translate FedRAMP, NIST SP 800-53 Revision 5, DOE, NNSA, CUI, privacy, and system-security requirements into implementable controls.
Support development of the system security plan and activities necessary to request an IATO or ATO.
Configure and monitor IAM, KMS, CloudTrail, CloudWatch, AWS Config, Security Hub, VPC, logging, encryption, and approved security services.
Design integration with DOE OneID/SAML and Government SIEM capabilities, including Splunk where directed.
Implement least privilege, role-based access, row/column controls, auditability, incident response, vulnerability management, and continuous monitoring.
Maintain security artifacts, evidence, control mappings, POA&Ms, configuration baselines, and operational procedures.
Review proposed architecture changes for authorization-boundary and security consequences.
Support production and test environments, release management, backup, recovery, availability, and operational monitoring.
Train delivery personnel on applicable handling and security obligations.
Five or more years securing AWS systems in federal or highly regulated environments.
Experience supporting federal ATO or IATO packages.
Working knowledge of FedRAMP Moderate, NIST SP 800-53 Revision 5, CUI, incident response, continuous monitoring, and AWS shared responsibility.
Hands-on experience with AWS identity, encryption, logging, monitoring, networking, and security-posture services.
Experience with SIEM integration and security evidence production.
Strong technical writing and audit-support skills.
U.S. citizenship is required. No current DOE/NNSA clearance is required, but the candidate must be capable of obtaining a DOE/NNSA Q clearance if required. Experience handling CUI, UCNI, or similarly restricted information is strongly preferred.
Remote within the United States with occasional travel. Proposal-stage advisory work may begin immediately. Transition and operations work is contingent upon contract award.