Cloud Security & Compliance Engineer

Overview DecisionPoint seeks a Cloud Security & Compliance Engineer to support cybersecurity compliance, RMF alignment, and IL5 cloud security operations for AWS GovCloud environments supporting a large federal and DoD-aligned mission environment. This role performs impact analysis, updates RMF documentation, maintains STIG compliance, validates security configurations, and ensures IL5 cybersecurity continuity throughout migration and modernization activities. The Cloud Security & Compliance Engineer works closely with cloud architects, ISSM/ISSO teams, cybersecurity analysts, DevSecOps engineers, and system administrators to maintain a secure, compliant, and continuously monitored cloud ecosystem. This position is fully remote. Duties & Responsibilities The Cloud Security & Compliance Engineer will: Perform RMF impact analysis for system changes affecting cloud security posture. Update and maintain RMF documentation including SSPs, POA&Ms, SARs, and control evidence. Ensure STIG compliance for cloud services, operating systems, containers, and supporting components. Validate encryption configurations, IAM changes, auditing controls, and logging requirements. Support continuous monitoring, vulnerability management, and remediation tracking. Assist with IL5 migration security validation, ensuring no degradation of compliance during transitions. Review configuration baselines, IaC templates, and cloud security policies for alignment with RMF and Zero Trust.