Cloud Security and Risk Management Framework (RMF) Subject Matter Expert (SME)

Key Responsibilities

• Provide cloud tenancy services and deliver enhanced capabilities within an Oracle Cloud Infrastructure (OCI) hosting environment.
• Secure, isolate, and administer the cloud tenancy to effectively create, organize, integrate, and manage cloud resources.
• Research, evaluate, and implement new OCI services and capabilities to improve operational performance and strengthen security posture.
• Administer middleware and web tiers, manage single sign-on (SSO), and create/manage users, groups, and access controls.
• Apply expert knowledge of NIST RMF, C&A processes, and DoD cybersecurity requirements to assess controls, identify risks, and ensure compliance.
• Support the design, implementation, and maintenance of cloud-native security configurations, including Oracle CloudGuard.
• Conduct C&A reviews for large, complex information systems and ensure alignment with DoD, NIST, and FedRAMP requirements.
• Provide technical leadership across cloud service engineering, including distributed systems, virtualized infrastructure, identity, observability, and security.
• Manage and support Autonomous Database, Oracle Enterprise Database, and Oracle Database Cloud Service (DBCS).
• Deploy and manage containerized applications using Oracle Kubernetes Engine (OKE).
• Automate tasks using scripting and IaC tools such as Ansible (OCI-compliant), HELM, and Terraform.
• Apply expertise in modern computing paradigms including hybrid cloud, edge computing, microservices, and IoT-related protocols.

Requirements

• Must have an active Secret clearance.
• Must possess a DoD Approved 8570 IAM Level I baseline certification (e.g., Security+ or equivalent).
• Must possess a Cloud Computing Security Certification, such as: Certified Cloud Security Professional (CCSP) Certificate of Cloud Security Knowledge (CCSK) OCI Specialty Certification.
• Minimum 5 years of experience supporting DoD IL5 Oracle Cloud Infrastructure (OCI) administration, maintenance, and operations.
• Experience across multiple OCI technical domains, including: Information Systems Architecture Security Engineering (STIGs, DoD Cloud SRG, policies) Communications and Network Systems Management.
• Demonstrated expertise with RMF, NIST C&A, and DoD cybersecurity frameworks.
• Experience assessing cybersecurity controls and conducting C&A reviews for large, complex systems.
• Strong understanding of FedRAMP assessment methodology, including all six domain areas: Architectural Concepts & Design Requirements Cloud Data Security Cloud Platform & Infrastructure Security Cloud Application Security Operations Legal & Compliance.
• Proven ability to solve complex problems across cloud software engineering, distributed systems, identity, security, and observability.
• Experience configuring and managing cloud-native security tools, including Oracle CloudGuard.

Benefits

• Full-time salaried employees competitive salaries with a range of benefits.
• Medical, Dental, & Vision.
• Life Insurance, Short-term Disability, Long-term Disability.
• SIMPLE IRA with Company Match.
• Federal Holidays.
• Vacation & Sick Leave.
• $500 Referral Bonus.