Senior Cloud Cybersecurity Specialist

Responsibilities

• Serve as the cybersecurity Subject Matter Expert (SME) supporting the IRS Enterprise Data Platform modernization initiative
• Lead the development and implementation of cloud security strategies, architectures, and security controls across enterprise data platforms
• Provide guidance on cybersecurity requirements throughout system development, cloud migration, and modernization efforts
• Ensure compliance with federal security mandates including FISMA, NIST RMF, Treasury directives, and IRS cybersecurity policies
• Lead security architecture reviews and evaluate proposed cloud solutions for security, privacy, and compliance impacts
• Support system authorization and accreditation activities, including Authority to Operate (ATO) packages and ongoing authorization requirements
• Develop and maintain cybersecurity documentation, including: System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), Security Architecture Documentation
• Continuous Monitoring Plans
• Conduct risk assessments, threat modeling, and security impact analyses for cloud-hosted systems and enterprise data services
• Collaborate with cloud engineers and DevSecOps teams to integrate security controls into CI/CD pipelines and infrastructure automation processes
• Evaluate and implement cloud-native security technologies and monitoring solutions
• Oversee vulnerability management activities, remediation planning, and compliance reporting
• Support security incident response, forensic investigations, and root cause analysis activities
• Provide technical leadership for implementation of Zero Trust Architecture principles across the enterprise data ecosystem

Qualifications and Education Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related technical discipline
• Minimum of ten (10) years of experience in cybersecurity, information assurance, cloud security, or security architecture
• Minimum five (5) years of experience securing cloud environments supporting enterprise-scale systems
• Demonstrated experience supporting federal cybersecurity compliance programs
• Extensive knowledge of: NIST Risk Management Framework (RMF), NIST SP 800-53 Security Controls, FISMA Requirements, FedRAMP Security Standards, Zero Trust Architecture
• Experience supporting Authority to Operate (ATO) processes and continuous authorization activities
• Strong understanding of enterprise security architecture, identity management, and cloud-native security services
• Must be able to pass a Minimum Background Investigation or (MBI) background check
• Lives in the United States and is authorized to work in the United States