Posted 1 day ago
Top Secret/SCI
Mid Level Career (5+ yrs experience)
Unspecified
Full Scope Polygraph
IT - Support
Chantilly, VA (On-Site/Office)
Job Title: Cloud Engineer
Location: On-site Herndon, VA
Clearance Required: TS/SCI with Full Scope Polygraph
Company: Quantum Science Solutions (QSS)
Rate: Open
Position Overview
Quantum Science Solutions (QSS) is seeking a Cloud Engineer to support secure cloud
architecture, system authorization, and compliance operations for a U.S. Government
customer. The selected candidate will contribute to enterprise cloud security initiatives,
participate in architecture reviews, and ensure mission-critical services remain secure and
compliant across leading commercial cloud platforms.
This is a hands-on technical role requiring expertise in cloud technologies, federal risk
management frameworks, and secure systems engineering.
Key Responsibilities
• Facilitate Technical Exchange Meetings (TEMs) with cloud service providers to evaluate
cloud service architectures and integration strategies.
•Support the design, implementation, and security assessment of cloud-based systems
across AWS, Azure, Oracle Cloud, IBM Cloud, and Google Cloud environments.
•Maintain and manage Assessment & Authorization (A&A) packages in alignment with NIST
800-53, FIPS 199, CNSS 1253, and Sponsor-specific guidance.
• Analyze scan results using tools such as Nessus, Rapid7, and Qualys; assess
vulnerabilities and develop risk mitigation strategies.
•Support continuous monitoring activities and implement controls aligned with evolving
mission requirements.
• Track compliance activities using tools such as Xacta 360, RSA Archer, or Risk Vision.
•Lead and support Security Control Assessments (SCAs), prepare documentation, and
collaborate with independent assessors.
•Apply common control provider models and integrate reusable security controls within
cloud environments.
•Consult with development and project teams on secure system architecture and
operational posture.
• Develop and manage POA&Ms to address security findings and maintain system
accreditation.
• Contribute to standard operating procedures to ensure consistency and alignment with
program objectives.
• Collaborate with internal security peers and leadership to evaluate cloud infrastructure
and provide remediation recommendations.
• Review body-of-evidence documentation for completeness, accuracy, and relevance in a
cloud security context.
• Provide strategic input to Sponsor leadership on cloud service evaluation and security
planning.
• Analyze alerts to identify system security issues and recommend corrective actions.
Mandatory Skills & Experience
• Demonstrated experience working with the Sponsor’s or element’s A&A process.
• Proven success facilitating secure architecture reviews with CSPs and evaluating cloud
security postures.
• Strong knowledge of NIST RMF, including POA&M creation, continuous monitoring, and
common control frameworks.
• Experience with multiple commercial cloud platforms including AWS, Azure, GCP, Oracle
Cloud, and IBM Cloud.
• Proficiency using vulnerability scanning and compliance tools (Nessus, Rapid7, Qualys,
Xacta 360, RSA Archer).
• Experience working with cross-domain technologies and secure architecture designs.
• Ability to collaborate effectively with SCAs and prepare comprehensive security
packages.
• Strong understanding of information security controls, risk assessments, and A&A
documentation.
• Ability to advise teams on system engineering and security requirements in a classified
environment.
Education Requirement
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related
technical field.
• Equivalent experience may be substituted for a degree on a year-for-year basis.
Preferred Skills
• Direct experience using Xacta 360 in support of cloud A&A activities.
• Experience with cloud security policies and control inheritance.
• Familiarity with security engineering and risk analysis in hybrid and multi-cloud
environments.
•Strong stakeholder communication skills, with the ability to brief leadership on technical
and policy-level issues.
•Experience analyzing body-of-evidence (BoE) documentation and identifying
documentation gaps.
Preferred Certifications
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Security+
• Certified Cloud Security Professional (CCSP)
• AWS Certified Security – Specialty (or equivalent from another CSP)
Why Join QSS?
At Quantum Science Solutions (QSS), we deliver secure, scalable, and mission-aligned
technology solutions to support national security objectives. Our cloud and cybersecurity
professionals thrive in high-impact environments where innovation and integrity matter.
Join us and help shape the future of secure cloud services within the U.S. Intelligence
Community.
Employee Benefits
• Competitive Compensation & Performance Bonuses
•Premium Medical, Dental & Vision Insurance
• Generous Paid Time Off (PTO) and Federal Holidays
•401(k) with Company Matching
Location: On-site Herndon, VA
Clearance Required: TS/SCI with Full Scope Polygraph
Company: Quantum Science Solutions (QSS)
Rate: Open
Position Overview
Quantum Science Solutions (QSS) is seeking a Cloud Engineer to support secure cloud
architecture, system authorization, and compliance operations for a U.S. Government
customer. The selected candidate will contribute to enterprise cloud security initiatives,
participate in architecture reviews, and ensure mission-critical services remain secure and
compliant across leading commercial cloud platforms.
This is a hands-on technical role requiring expertise in cloud technologies, federal risk
management frameworks, and secure systems engineering.
Key Responsibilities
• Facilitate Technical Exchange Meetings (TEMs) with cloud service providers to evaluate
cloud service architectures and integration strategies.
•Support the design, implementation, and security assessment of cloud-based systems
across AWS, Azure, Oracle Cloud, IBM Cloud, and Google Cloud environments.
•Maintain and manage Assessment & Authorization (A&A) packages in alignment with NIST
800-53, FIPS 199, CNSS 1253, and Sponsor-specific guidance.
• Analyze scan results using tools such as Nessus, Rapid7, and Qualys; assess
vulnerabilities and develop risk mitigation strategies.
•Support continuous monitoring activities and implement controls aligned with evolving
mission requirements.
• Track compliance activities using tools such as Xacta 360, RSA Archer, or Risk Vision.
•Lead and support Security Control Assessments (SCAs), prepare documentation, and
collaborate with independent assessors.
•Apply common control provider models and integrate reusable security controls within
cloud environments.
•Consult with development and project teams on secure system architecture and
operational posture.
• Develop and manage POA&Ms to address security findings and maintain system
accreditation.
• Contribute to standard operating procedures to ensure consistency and alignment with
program objectives.
• Collaborate with internal security peers and leadership to evaluate cloud infrastructure
and provide remediation recommendations.
• Review body-of-evidence documentation for completeness, accuracy, and relevance in a
cloud security context.
• Provide strategic input to Sponsor leadership on cloud service evaluation and security
planning.
• Analyze alerts to identify system security issues and recommend corrective actions.
Mandatory Skills & Experience
• Demonstrated experience working with the Sponsor’s or element’s A&A process.
• Proven success facilitating secure architecture reviews with CSPs and evaluating cloud
security postures.
• Strong knowledge of NIST RMF, including POA&M creation, continuous monitoring, and
common control frameworks.
• Experience with multiple commercial cloud platforms including AWS, Azure, GCP, Oracle
Cloud, and IBM Cloud.
• Proficiency using vulnerability scanning and compliance tools (Nessus, Rapid7, Qualys,
Xacta 360, RSA Archer).
• Experience working with cross-domain technologies and secure architecture designs.
• Ability to collaborate effectively with SCAs and prepare comprehensive security
packages.
• Strong understanding of information security controls, risk assessments, and A&A
documentation.
• Ability to advise teams on system engineering and security requirements in a classified
environment.
Education Requirement
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related
technical field.
• Equivalent experience may be substituted for a degree on a year-for-year basis.
Preferred Skills
• Direct experience using Xacta 360 in support of cloud A&A activities.
• Experience with cloud security policies and control inheritance.
• Familiarity with security engineering and risk analysis in hybrid and multi-cloud
environments.
•Strong stakeholder communication skills, with the ability to brief leadership on technical
and policy-level issues.
•Experience analyzing body-of-evidence (BoE) documentation and identifying
documentation gaps.
Preferred Certifications
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Security+
• Certified Cloud Security Professional (CCSP)
• AWS Certified Security – Specialty (or equivalent from another CSP)
Why Join QSS?
At Quantum Science Solutions (QSS), we deliver secure, scalable, and mission-aligned
technology solutions to support national security objectives. Our cloud and cybersecurity
professionals thrive in high-impact environments where innovation and integrity matter.
Join us and help shape the future of secure cloud services within the U.S. Intelligence
Community.
Employee Benefits
• Competitive Compensation & Performance Bonuses
•Premium Medical, Dental & Vision Insurance
• Generous Paid Time Off (PTO) and Federal Holidays
•401(k) with Company Matching
group id: 91142086
