Description
The Cyber Security Engineer will provide security engineering, compliance, and risk management support for cloud-based systems aligned with NIST SP 800-53, FedRAMP, and DoD IL4–6 requirements. The role will advise partners and customers navigating government security requirements while supporting authorization, audit readiness, and continuous monitoring activities. A key focus will be improving compliance efficiency through GRC platforms, APIs, scripts, cloud-native services, and automation for evidence collection, control validation, documentation, reporting, and remediation tracking. This position is remote supporting a Herndon, VA based team.
Essential Skills
• Provide cybersecurity engineering and compliance support for FedRAMP and DoD-authorized cloud environments, including IL4–6.
• Advise partners and customers on federal and DoD security requirements, authorization strategies, control implementation, and audit readiness.
• Develop, review, and maintain authorization documentation, including SSPs, SAPs, SARs, POA&Ms, FedRAMP appendices, policies, and supporting evidence.
• Support system authorization and reauthorization activities across FedRAMP/RMF, including gap assessments, control validation, evidence development, and remediation planning.
• Leverage GRC platforms, APIs, scripts, and automation to streamline compliance workflows, evidence collection, documentation updates, control testing, and reporting.
• Develop repeatable and auditable processes that reduce manual compliance effort and improve the accuracy and consistency of authorization artifacts.
• Collaborate with cloud engineering and DevOps teams to design, implement, and validate security controls across AWS, Azure, and hybrid environments.
• Review system changes and significant change requests to assess security impact, identify documentation updates, and maintain authorization boundaries.
• Coordinate with system owners, engineers, 3PAOs, Authorizing Officials, and government stakeholders to address findings and support authorization outcomes.
• Support continuous monitoring, vulnerability management, POA&M updates, remediation tracking, and recurring compliance deliverables.
• Evaluate security tooling and data sources to identify opportunities for automated control validation and compliance reporting.
• Track evolving federal cybersecurity requirements and translate them into practical technical and operational actions.
Required Skills & Experience
• Strong analytical, documentation, and problem-solving skills with a focus on secure and compliant outcomes.
• Excellent communication and stakeholder-management skills, including the ability to advise partners, customers, engineers, and government stakeholders.
• Ability to translate federal security requirements into practical technical controls and operational processes.
• U.S. citizenship with the ability to obtain and maintain a Secret or higher security clearance.
• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field, or equivalent practical experience.
• Five or more years of cybersecurity experience, including at least three years supporting federal cloud security engineering, information assurance, RMF, or ISSO functions.
• Knowledge of NIST SP 800-53 Rev. 5, FedRAMP Moderate and High, DoD IL4–6 overlays, RMF, and related federal compliance frameworks.
• Experience developing and maintaining SSPs, POA&Ms, SARs, policies, control evidence, and other authorization artifacts.
• Experience supporting authorization planning, gap assessments, audit readiness, control implementation, and remediation activities.
• Hands-on experience with AWS, Azure, or hybrid cloud environments, including IAM, encryption, logging, configuration management, and security monitoring.
• Experience using GRC platforms, APIs, scripting, or automation to improve compliance and security workflows.
• Familiarity with tools such as eMASS, Paramify, Nessus/Tenable, Splunk, Prisma Cloud, or comparable solutions.
• CISSP, CGRC/CAP, CISM, Security+, or similar cybersecurity certificate
.
Desired Skills & Experience
• Experience supporting FedRAMP, DoD, DISA, or federal agency ATO activities.
• Experience developing automation with Python, PowerShell, REST APIs, infrastructure-as-code, or cloud-native services.
• Experience integrating vulnerability, configuration, and cloud-security data into GRC (Paramify) and POA&M workflows.
• Familiarity with DevSecOps pipelines, automated security testing, policy-as-code, and continuous control validation.
• Knowledge of FISMA, the Privacy Act, and agency-specific security requirements.
#CJPOST
The SMX salary determination process takes into account a number of factors, including but not limited to, geographic location, Federal Government contract labor categories, relevant prior work experience, specific skills, education and certifications. At SMX, one of our Core Values is to Invest in Our People so we offer a competitive mix of compensation, learning & development opportunities, and benefits. Some key components of our robust benefits include health insurance, paid leave, and retirement.
At SMX®, we are a team of technical and domain experts dedicated to enabling your mission. From priority national security initiatives for the DoD to highly assured and compliant solutions for healthcare, we understand that digital transformation is key to your future success.
We share your vision for the future and strive to accelerate your impact on the world. We bring both cutting edge technology and an expansive view of what’s possible to every engagement. Our delivery model and unique approaches harness our deep technical and domain knowledge, providing forward-looking insights and practical solutions to power secure mission acceleration.
SMX is an Equal Opportunity employer including disabilities and veterans.
Selected applicant may be subject to a background investigation and/or education verification.
SMX does not sponsor a new applicant for employment authorization or immigration related support for this position (i.e. H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-2, E-3, L-1 and O-1, or any EADs or other forms of work authorization that require immigration support from an employer).
Similar jobs
Est. 150,000 USD
SMX is seeking a dynamic and experienced Technical Lead to guide a team of talented engineers in the design, development, and delivery of mission-critical solutions. This is a hybrid role for a leader who is passionate a…
Est. 105,100 USD
We are looking for a skilled Cloud Engineer to join our State and Local Platforms and Data Managed Services team. As a core member of our operations group, you will work across multiple client environments, implementing,…
Est. 140,250 USD
We are seeking an experienced Cloud Architect to join our State and Local Platforms and Data Managed Services team. In this key role, you will design, implement, and manage cloud solutions across a diverse portfolio of c…
Est. 137,600 USD
SMX is seeking Information Assurance/Cybersecurity Specialists (Junior, Mid, and Senior) with a foundation in information systems, multi-cloud, network administration, systems administration, and cybersecurity. This role…
Est. 128,500 USD
SMX is seeking an Azure DevSecOps Engineer supporting the design and implementation of secure, scalable multi-cloud infrastructure, applications, and services in support of enterprise cloud migration and mission-critical…
Est. 137,600 USD
SMX is seeking Cloud Systems Engineers (Junior/Mid/Senior/SME) supporting the design and implementation of secure, scalable multi-cloud infrastructure, applications, and services in support of enterprise cloud migration…
Est. 81,200 USD
SMX is actively searching for a dynamic and adept Junior Cloud Engineer to support our government client in Huntsville, AL. This role emphasizes operational excellence, championed by a commitment to quality, articulate c…
Est. 86,150 USD
SMX is hiring a Data Analyst responsible for profiling data sources, documenting data lineage, and aligning data to a common domain model that powers enterprise data products, APIs, and analytics. Working closely with da…
SMX is seeking a Senior Systems Engineer / ISR Communications professional to support the design, implementation, operation, security, and troubleshooting of enterprise and mission-focused network infrastructure. The ide…
Est. 104,250 USD
SMX is actively searching for a dynamic and adept Cloud Engineer to support our government client in Huntsville, AL. This role emphasizes operational excellence, championed by a commitment to quality, articulate communic…
Est. 137,450 USD
SMX is hiring a Data Engineer responsible for designing, building, and maintaining scalable data architecture that powers our AI, analytics and reporting. Collaborate closely with Analysts, AI Engineers, and Software Eng…
Est. 137,600 USD
SMX is seeking Cloud Analysts (Junior/Mid/Senior) supporting the design and implementation of secure, scalable multi-cloud infrastructure and services in support of enterprise analytics and mission-critical systems for t…
Est. 129,000 USD
SMX is seeking a Knowledge Systems Integrator to support government client at Camp Smith. The Knowledge Systems Integrator (KSI) / Knowledge Manager will enable units to leverage emerging AI technologies and integrate th…
Est. 150,000 USD
SMX is looking for a Field Support Representative Operations to support SOCPAC J6 TACLAN operations across the PACOM Theater. The FSR Operations is a highly skilled IT specialist responsible for maintaining, troubleshoot…
Est. 137,600 USD
SMX is seeking Cloud Subject Matter Experts (Junior/Mid/Senior) supporting secure, scalable multi-cloud infrastructure and services in support of business and mission-critical systems for the United States Air Force. Col…
Est. 137,500 USD
SMX is seeking an Automation Engineer, Mid to design, develop, and implement automation and orchestration solutions that enhance the efficiency, scalability, and resilience of the organization’s cybersecurity and network…
Est. 104,500 USD
SMX is seeking a QA Tester/Engineer to ensure the quality, reliability, and performance of enterprise software applications and cloud-native solutions. The ideal candidate is a detail-oriented qualit… SMX is seeking a QA…
Est. 156,500 USD
SMX is seeking an AI Engineer to support government client at Camp Smith. The AI Engineer designs, develops, tests, and improves AI-enabled systems that support client operations, business processes, and organizational K…
Est. 32,500 USD
SMX is seeking a mid-level IT Specialist to provide NMCI support for our NAWCAD customer in Lakehurst, NJ. Essential Duties & Responsibilities Create and maintain customer relations ensuring the POC is aware of their…
Est. 156,500 USD
SMX is seeking an AI Engineer and Integrator to support government client at Camp Smith. The AI Integrator serves as the client-facing AI integration lead and secondary AI Engineer. This role sits close to the client and…
Est. 128,150 USD
Are you a Senior Database Architect who thrives at the intersection of enterprise cloud infrastructure, high-performance data warehousing, and mission-critical availability? We are seeking a Senior Cloud Database Develop…
Est. 111,050 USD
The mission of the client service delivery team at SMX is to create and deploy innovative products to our federal customers. The CFO Control Tower Budget and Spend (BAS) solution is a planning and reporting solution that…
Est. 137,450 USD
How would you like to be part of a leadership team made up of experts and senior level staff who have experience, capacity and capability to lead large scale portfolios. The leadership team will foster the organizational…
Est. 222,650 USD
SMX is standing up and scaling an agentic AI practice: bringing agentic software engineering (autonomous AI agents that write, test, and modernize code) to Department of War, Federal Civilian, and Intelligence Community…
Est. 80,500 USD
SMX is seeking an FMV Analyst Journeyman to support 24/7 Intelligence, Surveillance, and Reconnaissance (ISR) operations conducting Processing, Exploitation, and Dissemination (PED) missions supporting Special Operations…
Est. 173,100 USD
SMX is seeking a dynamic Sr. Program Manager to lead a large-scale, mission-critical IT modernization and transformation program for a federal agency focused on national security and law enforcement. The Program Manager…
Est. 140,000 USD
SMX is looking for a Field Support Representative to support SOCPAC J6 TACLAN operations across the PACOM Theater. The FSRs are highly skilled IT specialists responsible for maintaining, troubleshooting, and supporting T…
Est. 116,900 USD
SMX is seeking a Journeyman level SOC Analyst to support our NAWCAD customer onsite at the Patuxent River Naval Air Station. Essential Duties & Responsibilities Provide timely detection, identification, and alerting…
Est. 137,450 USD
SMX is seeking a Senior Solutions Architect to join a federal pursuit. How would you like to be part of a leadership team made up of experts and senior level staff who have experience, capacity and capability to lead lar…
Est. 47,280 USD
The IT Storefront Specialist is an entry-level role responsible for providing front-line IT support and administrative assistance for NMCI users. This position supports day-to-day operational activities by issuing equipm…