Cloud Security Engineer, Senior
Summary
Senior Cloud Security Engineer at TIAG working hybrid from a government customer site (USUHS) in Bethesda, MD. Day to day: technical discovery, gap analysis, and security architecture validation to modernize ATO packages — evaluating Google Cloud, Google Workspace, and ServiceNow GCC-High against NIST 800-53 Rev 5 and DoD IL-4. Secret clearance and US citizenship required.
TIAG is seeking a Senior Cloud Security Engineer to drive the technical discovery, gap analysis, and security architecture validation for the modernization of Authorization to Operate (ATO) packages. This role focuses specifically on evaluating and securing Google Cloud, Google Workspace, and ServiceNow GCC-High instances, transitioning them from legacy NIST SP 800-53 Revision 3 baselines to NIST SP 800-53 Revision 5 and DoD Impact Level 4 (IL-4) standards.
This position reports to our customer site at the Uniformed Services University of Heath Sciences (USUHS) in Bethesda, MD in a hybrid capacity. A secret clearance is required to start work, so US or Naturalized Citizenship is a requirement.
Key Responsibilities
- Conduct technical discovery by evaluating Google Cloud, Google Workspace, and ServiceNow GCC-High environments against NIST SP 800-53 Revision 5 and DoD Cloud Computing Security Requirements Guide IL-4 requirements.
- Analyze existing technical implementations to identify differences between legacy control documentation, DISA eMASS baseline assumptions, and the Agency's actual cloud configuration.
- Evaluate Cloud Service Provider (CSP) FedRAMP security packages provided by Google and ServiceNow to accurately identify inherited controls versus shared or Agency-implemented responsibilities.
- Validate technical assumptions through system access, review of available technical configuration documentation, and technical interviews with Government personnel.
- Identify cloud security control gaps, document the associated risks, and provide recommended dispositions for future remediation without altering production configurations.
- Collect, review, and validate technical evidence—such as configuration screenshots, system-generated reports, and log exports—necessary to support the documented control implementation.
- Provide technical engineering input for RMF artifacts, ensuring implementation-specific control narratives accurately reflect the cloud architecture rather than generic baseline statements.
- Conduct Human-in-the-Loop (HitL) validation on AI-assisted technical content to ensure architectural and configuration statements are highly accurate and properly address Rev 5 and IL-4 requirements.
- Deliver key technical reports, including the DoD IL-4 Gap Analysis Report for Google environments and the ServiceNow GCC-High Technical Alignment Report.
