This role is responsible for securing and maintaining AWS GovCloud infrastructure in support of continuous authorization (cATO) within classified environments. The position combines hands-on cloud security engineering including boundary protection, vulnerability management, STIG/SRG assessments, patching, and POA&M tracking with NIST 800-53 and FedRAMP compliance evidence production and continuous monitoring. The engineer will triage security findings, review infrastructure-as-code changes for security impacts, coordinate incident response across cross-contractor teams, and build strong client relationships through clear, consistent communication.

DUTIES AND RESPONSIBILITIES:

Client Relationship:

· Build a great relationship with the client

· Understand our clients: drivers, needs, and pains

· Work with internal and external leadership and engineering teams to formulate the best and consistent client communication

Technical Responsibilities:

· Operate and maintain cloud boundary protection capabilities, including perimeter controls, segmentation, security logging, and monitoring

· Perform infrastructure vulnerability assessments, configuration reviews, hardening, patching, and remediation validation against applicable STIG, SRG, and cATO requirements

· Maintain infrastructure POA&Ms and track critical and high findings through remediation or approved disposition within BESPIN Security’s cATO timelines

· Produce and maintain infrastructure authorization evidence, including boundary diagrams and dataflows, inventories, implemented and inherited controls, STIG/SRG/SCAP results, patch records, and continuous monitoring records

· Keep evidence current before each boundary change and consolidate infrastructure evidence quarterly ahead of the companion contractor’s BOE delivery

· Review security impacts of landing-zone, identity and access, network, and infrastructure-as-code changes; coordinate security requirements at cross-domain interfaces

· Implement and document security controls aligned with NIST 800-53 and FedRAMP compliance requirements, supporting continuous authorization activities across cloud environments

REQUIRED QUALIFICATIONS:

· Ability to quickly secure Secret security clearance

· Experience working in classified environments and handling classified information in accordance with applicable security requirements

· Bachelor’s degree

· Applying secure coding practices and documentation standards

· Collaborating with cross-functional teams and other vendors to define, design, and deploy features

· Demonstrated experience securing AWS cloud infrastructure, including identity and access, networking, segmentation, logging, monitoring, and boundary protection

· Hands-on experience with infrastructure vulnerability management, patching, STIG/SRG assessments, SCAP results, and POA&M tracking

· Experience with security incident triage and coordination across infrastructure, application, and Government security teams

· Ability to review infrastructure-as-code and configuration changes for security impacts

· Demonstrated proficiency with AWS GovCloud environments and AWS-native security services

· Ability to troubleshoot and debug applications to ensure optimal performance

PREFERRED QUALIFICATIONS:

· Knowledge of DoD policies, regulations, procedures, and processes

· Experience in the technology industry or related field

· Experience with professional services or consulting

· Direct experience with AWS GovCloud, JOSCE/JWCC environments, eMASS, and cross-domain interfaces would also be valuable

· Experience with GitLab, including security pipeline configuration and management, multi-repository pipeline jobs, and CVE analysis and allow-list maintenance

· Experience supporting RMF/cATO processes and preparing infrastructure control and configuration evidence, including familiarity with NIST 800-53 and FedRAMP compliance frameworks

· Ability to distinguish inherited controls from contractor-implemented controls and maintain evidence as infrastructure changes

PHYSICAL AND MENTAL REQUIREMENTS:

· Continuous mental and/or visual attention required

· Requires the ability to remain stationary for long periods of time

· Regularly communicates to various people

· Large amount of reading and analysis is required

· Requires the ability to focus for an extended period of time

· Requires the ability to travel

· Requires the ability to work both remotely and at clients’ offices