View all jobs

FEDERAL AWS SECURITY, ATO AND CLOUD-OPERATIONS ENGINEER

  • Midlothian, VA

Axyde Analytics seeks a senior cloud-security engineer to support the secure transition and operation of an AWS-based federal data and AI platform handling Controlled Unclassified Information, specialized nuclear-security information, and sensitive personally identifiable information.

Responsibilities

  • Translate FedRAMP, NIST SP 800-53 Revision 5, DOE, NNSA, CUI, privacy, and system-security requirements into implementable controls.

  • Support development of the system security plan and activities necessary to request an IATO or ATO.

  • Configure and monitor IAM, KMS, CloudTrail, CloudWatch, AWS Config, Security Hub, VPC, logging, encryption, and approved security services.

  • Design integration with DOE OneID/SAML and Government SIEM capabilities, including Splunk where directed.

  • Implement least privilege, role-based access, row/column controls, auditability, incident response, vulnerability management, and continuous monitoring.

  • Maintain security artifacts, evidence, control mappings, POA&Ms, configuration baselines, and operational procedures.

  • Review proposed architecture changes for authorization-boundary and security consequences.

  • Support production and test environments, release management, backup, recovery, availability, and operational monitoring.

  • Train delivery personnel on applicable handling and security obligations.

Required Experience

  • Five or more years securing AWS systems in federal or highly regulated environments.

  • Experience supporting federal ATO or IATO packages.

  • Working knowledge of FedRAMP Moderate, NIST SP 800-53 Revision 5, CUI, incident response, continuous monitoring, and AWS shared responsibility.

  • Hands-on experience with AWS identity, encryption, logging, monitoring, networking, and security-posture services.

  • Experience with SIEM integration and security evidence production.

  • Strong technical writing and audit-support skills.

Personnel Requirements

U.S. citizenship is required. No current DOE/NNSA clearance is required, but the candidate must be capable of obtaining a DOE/NNSA Q clearance if required. Experience handling CUI, UCNI, or similarly restricted information is strongly preferred.

Engagement

Remote within the United States with occasional travel. Proposal-stage advisory work may begin immediately. Transition and operations work is contingent upon contract award.