AWS Cloud Security and Accreditation Lead

AWS Cloud Security and Accreditation Lead

Location:

Remote

time type

Full time

job requisition id

JR100368

Serves as the AWS Cloud Security and Accreditation Lead for pre-production modernization efforts. This position combines responsibility for designing, implementing, securing, accrediting, and scaling cloud-hosted environments supporting development, test, integration, and future production operations.

The AWS Cloud Security and Accreditation Lead serves as the primary cybersecurity and cloud subject matter expert responsible for managing AWS GovCloud environments while leading all Risk Management Framework (RMF), Interim Authority to Test/Connect (IATT-C), and Authority to Operate (ATO) activities. The position provides technical guidance throughout the acquisition lifecycle, ensuring cloud architectures are secure, compliant, scalable, and aligned with Department cybersecurity requirements.

The successful candidate will work closely with engineering, infrastructure, and program leadership teams to implement secure cloud-native solutions supporting modern databases, Java applications, APIs, CI/CD pipelines, Zero Trust architectures, Identity Credentialing and Access Management (ICAM), and future modernization initiatives.

*This position is contingent upon contract award.*

Responsibilities:

Cloud Engineering & Architecture

• Design, provision, secure, administer, and manage AWS GovCloud environments and accounts supporting development, test, and integration activities.
• Establish and maintain cloud landing zones, IAM boundaries, security controls, and network segmentation within a regulated government environment.
• Scale prototype environments into full pre-production environments capable of supporting future production operations.
• Engineer cloud-hosted solutions supporting relational databases, modern software applications, APIs, cloud-native services, microservices architectures, CI/CD pipelines, and modern UI/UX capabilities.
• Implement Infrastructure as Code (IaC), automated environment provisioning, container orchestration, and cloud-native deployment practices.
• Support protection, detection, monitoring, and response requirements for systems and data hosted within AWS.
• Contribute cloud architecture content to enterprise architecture artifacts, technical documentation, and solution designs.

Cybersecurity & Accreditation

• Lead accreditation efforts for cloud-hosted environments in accordance with NIST 800-37 Revision 5 and DoD RMF requirements.
• Prepare, manage, and submit IATT-C and ATO accreditation packages.
• Develop and maintain assessment and authorization artifacts required to obtain and sustain system authorization.
• Implement and validate RMF security controls across cloud environments.
• Apply cybersecurity concepts, policies, and Department requirements to AWS-hosted solutions.
• Support cybersecurity vulnerability assessments and remediation activities.
• Manage POA&M development, security findings, risk mitigation strategies, and continuous monitoring activities.
• Serve as principal liaison for cybersecurity reviews, boundary defense initiatives, and cloud security assessments.
• Ensure alignment with DoD Cyber Strategy, DoD Cyber Workforce Strategy, and DoD Zero Trust Strategy.
• Support Zero Trust (ZT) and Identity Credentialing and Access Management (ICAM) integration activities.

Program Support

• Provide cybersecurity and cloud engineering guidance during project reviews, stakeholder meetings, and technical planning sessions.
• Communicate cybersecurity risks, recommendations, and mitigation strategies to program leadership.
• Support cloud migration, legacy system modernization, data migration, and technology transition efforts.
• Support modernization activities involving modern databases, cloud-native architectures, and modern software development practices.

Qualifications:

• Years of Experience: 10
• Education Level: Desired BS in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, or a closely related discipline, or equivalent additional relevant experience.
• Clearance Requirements: Secret
• Certification Requirements:

Desired:

• AWS Solutions Architect Associate (or higher)
• AWS Cloud Practitioner
• Security+
• CISSP

Any other work-related qualifications needed for the role:

• Demonstrated experience obtaining IATT-C and ATO accreditations, including ownership of package development, submission, review, and approval processes.
• Demonstrated experience with DoD Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities.
• Demonstrated experience securing, accrediting, and administering AWS cloud environments.
• Priority will be given to personnel with demonstrated experience performing technical and functional decomposition supporting modernization solutions and implementing modern database, cloud, and software technologies within the Federal Government, specifically DoD environments.
• AI/ML experience is preferred.

About Us

Diné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, professional, environmental, and research and development services. DDC is dedicated to empowering the Navajo Nation and the communities we serve.

Benefits

Eligible full-time employees receive a comprehensive benefits package, including medical, dental, vision, life and disability coverage, retirement savings with company match, and paid time off. Additional benefits include voluntary supplemental benefits, access to an employee assistance program, and educational assistance with tuition reimbursement.

Equal Opportunity & Compliance Statement

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a), and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law.