Information Assurance (IA) Engineer

Job Description

Information Assurance (IA) Engineer | Leidos

The Tone:
This is a full-time role at Leidos, located in Huntsville, AL, with potential travel to support customer or corporate meetings. Leidos was awarded the U.S. Air Force Cloud One Architecture and Common Shared Services contract, modernizing a global-scale multi-cloud environment. This position is crucial for ensuring the resiliency, security, and cost-effectiveness of critical USAF systems by providing robust Information Assurance support for the Cloud One enterprise.

The TL;DR
• Role: Full Time
• Location: In-person, Huntsville, AL
• Pay: $69550–$125725 yearly
• Mission: This person ensures continued Authorization to Operate (ATO) compliance, security posture improvement, and rapid remediation of vulnerabilities within the USAF Cloud One environment.
• Tech Stack: AWS, Azure, Oracle, GCP, Risk Management Framework (RMF), NIST SP 800-53, DoDI 8500.01, DoDI 8510.01, AFI 17-101, DoD Cloud Computing SRG, DISA STIG/SRG, CNSSI 1253

What You’ll Actually Do
• Develop: Develop, update, and maintain Risk Management Framework (RMF) authorization artifacts in accordance with DoDI 8510.01 and NIST SP 800-53.
• Support: Provide RMF-required documentation and artifacts to Government ISSO/ISSM in support of Assessment & Authorization (A&A) activities and ATO maintenance.
• Manage: Maintain and update System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), and Plans of Action & Milestones (POA&Ms), including migration from NIST SP 800-53 Rev 4 to Rev 5.
• Implement: Support Continuous Authorization to Operate (cATO) within DevSecOps or cloud environments, including automated control validation and continuous monitoring integration.
• Ensure: Ensure compliance with DoD cybersecurity regulations and support secure configuration of AWS, Azure, Oracle, and GCP cloud environments.

The Must-Haves
• Background: Bachelor’s degree in a relevant field, or equivalent experience, with a focus on Information Assurance and cybersecurity principles.
• Experience: 2–4 years of relevant experience providing Risk Management Framework (RMF) engineering and cybersecurity support for multi-cloud environments (AWS, Azure, Oracle, GCP) at DoD Impact Levels 2–6.
• Skills: Active Secret clearance, CompTIA Security+ (IAT Level II) or equivalent, RMF authorization artifact development, ATO sustainment, vulnerability management, cybersecurity compliance (DoDI 8500.01, DoDI 8510.01, AFI 17-101), and secure cloud configuration.
• Bonus: Experience with USAF Cloud One or Platform 1, Zero Trust Architecture, Cloud certifications in AWS, Azure, Google, or Oracle clouds, automation experience, or CISSP (IAT Level III) certification.