Senior Security Subject Matter Expert (Cloud & Security)

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

Position Overview

Security Subject Matter Expert (SME) to support secure cloud systems in Federal and DoD environments. This role is responsible for designing, implementing, and maintaining security controls across cloud infrastructure, cybersecurity operations systems while supporting compliance with industry and government standards.

The ideal candidate has hands-on cloud security experience, a strong understanding of risk and compliance, and the ability to secure emerging technologies.

Responsibilities

• Design, implement, and maintain security controls across system development and operations.
• Secure AWS-based cloud environments; provide working knowledge of Azure and/or Google Cloud.
• Perform system hardening, vulnerability scanning, monitoring, and incident response.
• Analyze logs, develop alerts, and support forensic investigations.
• Support security architecture design and integration for new and existing systems.
• Provide support and oversight for systems, including:
  • Patching selection and updates
  • Training data security and integrity
  • Network monitoring, access controls, and monitoring
  • Review and approval of AI-related changes and updates
• Support compliance activities aligned with CMMC Level 2, SOC 2, and ISO/IEC 27001.
• Contribute to security documentation, risk assessments, and audit readiness efforts.

Required Experience/Qualifications

• Bachelor's degree (or equivalent experience) plus 3+ years of relevant security experience
• Hands-on experience securing on-premise/AWS environments
• Experience with cloud security and enterprise security tools
• Proficiency in Python for automation or security tooling

Preferred Experience/Qualifications

• CompTIA Security+
• GIAC
• GICSP
• CompTIA Network+
• ITIL
• Experience supporting Federal, DoD, or regulated environments
• Familiarity with AI/ML systems or emerging technology security

Special Requirements/Security Clearance

• Active Top Secret w/Poly clearance