FEDERAL AWS SECURITY, ATO AND CLOUD-OPERATIONS ENGINEER - Remote

Axyde Analytics is seeking a senior cloud-security engineer to support a federal AWS-based data and AI platform. The role focuses on translating federal security requirements into controls, supporting ATO and IATO activities, operating AWS security services, maintaining compliance artifacts, and supporting secure production operations.

Responsibilities:

• Translate FedRAMP, NIST SP 800-53 Revision 5, DOE, NNSA, CUI, privacy, and system-security requirements into implementable controls
• Support development of the system security plan and activities necessary to request an IATO or ATO
• Configure and monitor IAM, KMS, CloudTrail, CloudWatch, AWS Config, Security Hub, VPC, logging, encryption, and approved security services
• Design integration with DOE OneID/SAML and Government SIEM capabilities, including Splunk where directed
• Implement least privilege, role-based access, row/column controls, auditability, incident response, vulnerability management, and continuous monitoring
• Maintain security artifacts, evidence, control mappings, POA&Ms, configuration baselines, and operational procedures
• Review proposed architecture changes for authorization-boundary and security consequences
• Support production and test environments, release management, backup, recovery, availability, and operational monitoring
• Train delivery personnel on applicable handling and security obligations

Requirements:

• Five or more years securing AWS systems in federal or highly regulated environments
• Experience supporting federal ATO or IATO packages
• Working knowledge of FedRAMP Moderate, NIST SP 800-53 Revision 5, CUI, incident response, continuous monitoring, and AWS shared responsibility
• Hands-on experience with AWS identity, encryption, logging, monitoring, networking, and security-posture services
• Experience with SIEM integration and security evidence production
• Strong technical writing and audit-support skills
• U.S. citizenship is required
• No current DOE/NNSA clearance is required, but the candidate must be capable of obtaining a DOE/NNSA Q clearance if required
• Remote within the United States with occasional travel
• Experience handling CUI, UCNI, or similarly restricted information is strongly preferred