AGE Solutions

Builds secure networks for government agencies

Senior Cloud

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeFort Meade, MD, USA

About the Job

Requirements

A bachelor's degree is required; an IT-related field is preferred.
Eight years of overall experience in a cybersecurity or network security position is required.
An active Department of Defense Top Secret clearance with SCI eligibility is required.
A DoD 8570 IAM/IA Technical Level III certification is required.
Familiarity with security controls for Azure, AWS, and other cloud platforms is required.
A solid understanding of the DoD Risk Management Framework, DoDI 8510.01, and the DoD Cloud Computing Security Requirements Guide is required.
Hands-on experience with eMASS or other government-provided Governance, Risk, and Compliance tools is required.
Familiarity with cloud security documentation, including System Security Plans, Security Assessment Reports, Readiness Assessment Reports, and Plans of Action and Milestones, is required.
Ability to analyze complex cloud architectures and provide accurate risk assessments is required.
Strong technical writing and communication skills to produce security assessment reports and formal recommendations are required.
Applicants must reside within commuting distance of Fort Meade, Maryland, to work onsite full-time.

Responsibilities

Conduct cybersecurity assessments and validations of Cloud Service Offerings in support of the Department of Defense Provisional Authorization process.
Evaluate Cloud Service Provider documentation packages according to government guidance and procedures, including Cloud Architecture Diagrams, System Security Plans, System Security Plan Addenda, Readiness Assessment Reports, System Architectures, Security Assessment Plans, Security Assessment Reports, and associated Plans of Action and Milestones.
Review, analyze, and process Change Requests, Extension Requests, Deviation Requests, Whitelist Requests, Corrective Action Plans, template and process guide approvals, and continuous monitoring artifacts for existing Provisional Authorizations.
Prepare and deliver up to 30 Cloud Security Assessment Packages annually, each including validated cybersecurity controls, certifier recommendations, and a statement of residual risk.
Participate in technical kickoff meetings and review preliminary documentation to assess a Cloud Service Provider's readiness posture.
Analyze Cloud Service Provider submissions, including Readiness Assessment Reports, Security Assessment Plans, System Security Plans, and architectural diagrams, and provide detailed feedback.
Assess and document the operational impact of authorizations, changes, and vulnerabilities on the Cloud Service Provider environment.
Develop Cloud Security Assessment Packages in accordance with established guidelines, including Security Assessment Reports, Plans of Action and Milestones, and Deviation Requests.
Draft Authorization Recommendation Memoranda outlining Cloud Service Offering compliance with Department of Defense cybersecurity controls, residual risks, and technical findings.
Prepare formal Department of Defense Provisional Authorization memoranda detailing authorization length, Cloud Service Offering boundary, services provided, operating conditions, Department of Defense usage considerations, and follow-on activities.
Validate Cloud Service Offering controls within eMASS or other government-provided Governance, Risk, and Compliance tools and ensure accurate tracking in the Mission Status Report.
Review and verify the Customer Responsibility Matrix, ensuring proper control inheritance is reflected in eMASS or Governance, Risk, and Compliance systems.
Upload authorization conditions as system-level Plans of Action and Milestones in eMASS and monitor their resolution.
Organize and associate received documentation with applicable security controls within eMASS.
Maintain and update the Department of Defense Cloud Process Guide, including checklists, templates, forms, and guidance documents.
Assist in developing internal requirements and how-to guides for assessors conducting Cloud Service Provider validations.
Document and refine assessment procedures and validation best practices to align with DoDI 8510.01 and the Department of Defense Cloud Computing Security Requirements Guide.
Contribute to the ongoing development and annual updates of the Department of Defense Cloud Assessment Process Guides as requested by the Government.

About Us

AGE Solutions is a premier technology and professional services company, providing in-depth consulting, advanced technology solutions, and essential services throughout the U.S. government, defense, and intelligence sectors. Prioritizing innovation and client-focused solutions, we assist major agencies in addressing intricate issues and ensuring a more secure future.

AGE Solutions is looking for a Cloud SCA-R, Senior to join our team in support of an upcoming cybersecurity risk management and assessment program with our DoD customer. As a Team Lead, you will be responsible for performing analysis, conducting independent validations of assessments, and Continuous Monitoring (ConMon) for authorized CSPs and CSOs.

Individuals in this role must be available to work full-time on-site at Ft. Meade, MD.

Duties and Responsibilities Include:

Conduct cybersecurity assessments and validations of Cloud Service Offerings (CSOs) in support of the Department of Defense (DoD) Provisional Authorization (PA) process.
Evaluate Cloud Service Provider (CSP) documentation packages following government guidance and procedures, including key artifacts such as the Cloud Architecture Diagram, System Security Plan (SSP), SSP Addendum, Readiness Assessment Report (RAR), System Architecture, Security Assessment Plan (SAP), Security Assessment Report (SAR), and associated Plans of Action & Milestones (POA&Ms).
Review, analyze, and process additional documents including Change Requests, Extension Requests, Deviation Requests, Whitelist Requests, Corrective Action Plans, templates, process guide approvals, and continuous monitoring (ConMon) artifacts for existing Provisional Authorizations.
Prepare and deliver up to 30 Cloud Security Assessment Packages annually, each including validated cybersecurity controls, certifier recommendations, and a statement of residual risk.
Participate in technical kickoff meetings and review preliminary documentation to assess a CSP’s readiness posture.
Analyze and provide detailed feedback on CSP submissions such as the RAR, SAP, SSP, and architectural diagrams.
Assess and document the operational impact of authorizations, changes, and vulnerabilities on the CSP environment.
Develop Cloud Security Assessment Packages in accordance with established guidelines, including the SAR, POA&M, and any Deviation Requests.
Draft Authorization Recommendation Memoranda outlining CSO compliance with DoD cybersecurity controls, residual risks, and technical findings.
Prepare formal DoD Provisional Authorization memoranda, detailing authorization length, CSO boundary, services provided, operating conditions, DoD usage considerations, and follow-on activities.
Validate CSO controls within eMASS or other government-provided Governance, Risk, and Compliance (GRC) tools; ensure accurate tracking in the Mission Status Report (MSR).
Review and verify the Customer Responsibility Matrix (CRM), ensuring proper control inheritance is reflected in eMASS/GRC systems.
Upload authorization conditions as system-level POA&Ms in eMASS and monitor their resolution.
Organize and associate all received documentation with applicable security controls within eMASS.
Maintain and update the DoD Cloud Process Guide, including all checklists, templates, forms, and guidance documents.
Assist in developing internal requirements and how-to guides for assessors conducting CSP validations.
Document and refine assessment procedures and validation best practices to align with DoDI 8510.01 and the DoD Cloud Computing Security Requirements Guide (SRG).
Contribute to the ongoing development and annual updates of the DoD Cloud Assessment Process Guides as requested by the Government.

Requirements:

Bachelor's degree (IT-related field preferred)
Eight (8) years of overall experience in cybersecurity or network security position
Have an active DoD Top Secret clearance with SCI eligibility
DoD 8570 IAM/IA Technical (IAT) Level III certification
Familiarity with security controls for Azure, AWS, and assorted cloud platforms
Solid understanding of DoD Risk Management Framework (RMF), DoDI 8510.01, and DoD Cloud Computing Security Requirements Guide (SRG)
Familiarity with security controls for Azure, AWS, and assorted cloud platforms
Hands-on experience with eMASS or other government-provided GRC tools
Familiarity with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms
Ability to analyze complex cloud architectures and provide accurate risk assessments
Strong technical writing and communication skills to produce security assessment reports and formal recommendations
Applicants must reside within a commutable distance of Ft. Meade, MD in order to work onsite full time.

The projected salary range for this position is $115,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.

At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.

26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.
Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.
401(k) with Match: We match 3% of your contributions with immediate vesting.
Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.
Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
Parental Leave: 15 days of fully paid leave for new parents, because family matters.
Military Differential Pay: We bridge the gap for employees on active duty, so they don’t take a financial hit while serving.
Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create.

At AGE, you’ll do work that matters, supported by a company that delivers for its people.

About the Company

AGE Solutions

Builds secure networks for government agencies

AGE Solutions designs and operates secure computer networks for U.S. government, defense and intelligence agencies. Its engineers modernize communications infrastructure, move workloads into cloud environments and protect systems that carry sensitive mission information. The business combines technical consulting with implementation and ongoing support, earning revenue through government services contracts and work alongside larger contractors. Its network projects include replacing older communications circuits with higher-capacity connections so agencies can use cloud-hosted services. Founded in 2021, AGE Solutions is headquartered in Alexandria, Virginia.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: Alexandria, VA
Founded: 2021

Recently Posted Jobs

Explore more opportunities at AGE Solutions

See more jobs