Cloud Security, Risk Management Framework (RMF), Subject Matter Expert

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Deliver cloud tenancy services and enhance capabilities within an Oracle Cloud Infrastructure (OCI) hosting environment.

• Secure, isolate, and manage the cloud tenancy to effectively create, organize, integrate, and oversee cloud resources.

• Investigate, assess, and implement new OCI services and functionalities to boost operational performance and enhance security posture.

• Oversee middleware and web tiers, manage single sign-on (SSO), and create/manage user accounts, groups, and access controls.

• Utilize expert knowledge of NIST RMF, C&A processes, and DoD cybersecurity standards to evaluate controls, identify risks, and ensure compliance.

• Assist in the design, implementation, and maintenance of cloud-native security configurations, including Oracle CloudGuard.

• Conduct C&A reviews for large, complex information systems and ensure compliance with DoD, NIST, and FedRAMP standards.

• Provide technical leadership across cloud service engineering, incorporating distributed systems, virtualized infrastructure, identity, observability, and security.

• Manage and support Autonomous Database, Oracle Enterprise Database, and Oracle Database Cloud Service (DBCS).

• Deploy and oversee containerized applications utilizing Oracle Kubernetes Engine (OKE).

• Automate processes using scripting and IaC tools such as Ansible (OCI-compliant), HELM, and Terraform.

• Leverage expertise in contemporary computing paradigms, including hybrid cloud, edge computing, microservices, and IoT-related protocols.

⛳️ Requirements

• Must hold an active Secret clearance.

• Must possess a DoD Approved 8570 IAM Level I baseline certification (e.g., Security+ or equivalent).

• Must have a Cloud Computing Security Certification, such as:

• - Certified Cloud Security Professional (CCSP)

• - Certificate of Cloud Security Knowledge (CCSK)

• - OCI Specialty Certification

• At least 5 years of experience in supporting DoD IL5 Oracle Cloud Infrastructure (OCI) administration, maintenance, and operations.

• Experience across various OCI technical domains, including:

• - Information Systems Architecture

• - Security Engineering (STIGs, DoD Cloud SRG, policies)

• - Communications and Network Systems Management

• Proven expertise with RMF, NIST C&A, and DoD cybersecurity frameworks.

• Experience in assessing cybersecurity controls and conducting C&A reviews for large, complex systems.

• Strong understanding of FedRAMP assessment methodology, encompassing all six domain areas:

• - Architectural Concepts & Design Requirements

• - Cloud Data Security

• - Cloud Platform & Infrastructure Security

• - Cloud Application Security

• - Operations

• - Legal & Compliance

• Established ability to address complex problems in cloud software engineering, distributed systems, identity, security, and observability.

• Experience in configuring and managing cloud-native security tools, including Oracle CloudGuard.

🏝️ Benefits

• Medical, Dental, & Vision coverage.

• Life Insurance, Short-term Disability, and Long-term Disability benefits.

• SIMPLE IRA with Company Matching.

• Observance of Federal Holidays.

• Vacation and Sick Leave.

• $500 Referral Bonus.