DoW Cloud Security Information Systems Security Manager

Lead and support DoD RMF activities across the full lifecycle with a focus on real security outcomes in cloud-native, containerized environments. Provide guidance on DoD cloud security policy, NIST 800-53 controls, CNSS policy, Cloud Computing SRG, and AI risk; translate requirements into practical engineering and risk decisions. Conduct security architecture reviews for cloud-native workloads in Google Cloud Platform (GCP); evaluate security controls for Kubernetes, Docker, and GKE; develop and maintain RMF artifacts (SSP, SARs, POA&Ms); perform threat modeling, vulnerability assessment, and risk analysis; collaborate with system architects, developers, and DevSecOps to integrate security into the SDLC; coordinate with third-party assessors and stakeholders; monitor compliance and risk posture through Continuous Monitoring. Qualifications include U.S. citizenship with an active DoD clearance, a bachelor’s degree, security certifications (CISSP or CISM), 12+ years of cybersecurity experience with RMF activities, and strong knowledge of cloud and container technologies; preferred advanced cloud security certifications and automation experience for RMF documentation and evidence collection.