Information Assurance (IA) Engineer – Multi-Cloud (AWS, Azure, Google, Oracle)

Job Description

Information Assurance (IA) Engineer – Multi-Cloud (AWS, Azure, Google, Oracle) | Leidos

The Tone:
This is a full-time hybrid role at Leidos, located in Huntsville, AL, with potential travel to Boston, MA or Reston, VA. Leidos was awarded the U.S. Air Force Cloud One Architecture and Common Shared Services contract. This role leverages expertise to modernize a leading, global-scale multi-cloud environment, directly supporting the critical mission of USAF system resiliency, security, and cost-effectiveness.

The TL;DR
• Role: Full Time
• Location: Hybrid, Huntsville, AL
• Pay: $69550–$125725 yearly
• Team: Collaborates with Government ISSOs, ISSMs, Authorizing Officials (AOs), Cybersecurity Service Providers (CSSPs), and Cloud One engineering teams.
• Mission: Provides Risk Management Framework (RMF) engineering and cybersecurity support for the USAF Cloud One enterprise cloud environment to ensure continued Authority to Operate (ATO) compliance and enhance security posture.
• Tech Stack: AWS, Azure, Google Cloud (GCP), Oracle Cloud, DoD Impact Levels (IL) 2-6, DoDI 8500.01, DoDI 8510.01 (RMF), AFI 17-101 (RMF), DoD Cloud Computing SRG, NIST SP 800-53, NIST SP 800-53 Rev 4, NIST SP 800-53 Rev 5, DISA STIG/SRG, CNSSI 1253, DFARS 252.204-7012, DFARS 252.239-7010.

What You’ll Actually Do
• RMF Documentation: Develop, update, and maintain RMF authorization artifacts, including System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), and Plans of Action and Milestones (POA&Ms).
• ATO Sustainment: Support ongoing Authorization to Operate (ATO) and continuous ATO (cATO) activities, integrating automated control validation and real-time POA&M management within cloud environments.
• Cybersecurity Compliance: Assist Government ISSO/ISSMs in maintaining compliance with DoD directives (DoDI 8500.01, 8510.01), AFI 17-101, DoD Cloud Computing SRG, and DISA STIG/SRG.
• Vulnerability Management: Facilitate rapid remediation of vulnerabilities, support security control assessments, audit readiness, and maintain audit log configuration and retention compliance.
• Cloud Security Configuration: Ensure secure configuration of multi-cloud environments across AWS, Azure, Oracle, and Google Cloud platforms in accordance with SCCA and Cloud SRG requirements.

The Must-Haves
• Background: Bachelor’s degree with 2–4 years of relevant experience or additional years of experience in lieu of a degree. This is a mid-career Information Assurance Engineer role supporting critical USAF multi-cloud environments.
• Experience: 2–4 years of relevant experience in RMF engineering and cybersecurity support, with an active Secret clearance and CompTIA Security+ (IAT Level II) or equivalent. US citizenship is required.
• Skills: Risk Management Framework (RMF), NIST SP 800-53, DoD Cloud Computing SRG, Multi-cloud security (AWS, Azure, Google, Oracle), Cybersecurity compliance and vulnerability management.
• Bonus: Experience with USAF Cloud One or Platform 1, Zero Trust Architecture, Cloud certifications in AWS, Azure, Google, or Oracle clouds, Automation experience, CISSP (IAT Level III) or equivalent.