Active TS/SCI with polygraph Experience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS Experience supporting the Intelligence Community in RMF activities with ICD 503 and related compliance directives, policies, procedures Experience with the Zero Trust pillars and applying Zero Trust framework to secure systems DAST & SAST tools for on-prem (Fortify, Checkmarx, SonarQube), configuring Nessus, Splunk Multiple IAT/IAM II or III advanced certifications such as, CISSP-ISSAP/ISSEP, CISM, CCSP, Security X/CASP+ Cloud certifications such as AWS Solutions Architect, AWS Security Specialty, Kubernetes and Cloud Native Associate (KCNA), Certified Kubernetes Administrator (CKA), Certified Kubernetes Security Specialist (CKS) Linux certifications such as: Red Hat Certified System Administrator - Enterprise Linux (RHCSA), Red Hat Certified Engineer - Enterprise Linux (RHCE), Red Hat Certified Architect - Enterprise Linux (RHCA) Prior Linux sys admin experience Oracle Linux 8 System Administrator certification Experience applying security controls to various AI implementations Experience with ICD 503 compliance Experience applying security controls to Generative AI implementations Prior network engineering experience. You will work closely with the team on the following key tasks Collect, review, assess, and provide feedback on system cybersecurity, architecture, and engineering artifacts Collect, review, assess, and provide feedback on system cybersecurity Body-of-Evidence (BOE) results required to support DoD & IC RMF cybersecurity authorization processes Conduct periodic compliance scanning, vulnerability assessments, and risk analysis for cloud-based systems Implement and manage security controls for containerized applications and the underlying cloud-based infrastructure Collaborate with DevSecOps, infrastructure, and software development teams to ensure secure coding and engineering practices Ensure integration of security measures into software development processes, CI/CD pipelines, and engineering tools Develop, maintain, and execute shell commands, scripts, and automation code for STIG compliance and validation Implement and manage continuous monitoring solutions of cloud-based architectures Support Government cybersecurity officials & program personnel in preparing cybersecurity packages, including Interim Authority to Test (IATT) packages, Authority to Operate (ATO) packages, and Change Requests (CRs) Stay current with emerging cloud security threats, technologies, and best practices.