Cloud Computing Specialist (CCS) – Subject Matter Expert (SME)

Cloud Computing Specialist (CCS) – Subject Matter Expert (SME) The Cloud Computing Specialist (CCS) – Subject Matter Expert (SME) serves as a senior Information Assurance and cloud security expert responsible for assessing and managing cybersecurity risk across cloud environments supporting the IOEE/IOSEE mission. The CCS applies deep expertise in Certification and Accreditation (C&A), the NIST Risk Management Framework (RMF), and NIST SP 800-53 and 800-37 to evaluate security and privacy controls, identify and resolve cloud security risks, and support compliant implementation of cloud technologies. The role provides expertise across cloud architecture and design, data security, platform and infrastructure security, application security, operations, and legal/compliance considerations, applying FedRAMP assessment methodologies and cloud security best practices across deployment and service models. The CCS operates independently and supports the assessment and authorization of large, complex DoD information systems.* This position is contingent upon contract award.*Responsibilities: Serve as the subject matter expert for cloud security, Information Assurance, and C&A/RMF activities supporting IOEE/IOSEE.Assess cloud environments and security controls against NIST RMF, NIST SP 800-53, NIST SP 800-37, and applicable DoD requirements. Apply FedRAMP assessment methodologies to evaluate security and privacy controls within cloud information systems. Identify, assess, manage, and support resolution of cloud computing security risks. Evaluate security considerations across cloud architecture and design, data, platforms and infrastructure, applications, and operations. Conduct IA control assessments and C&A reviews for large, complex information systems. Recommend and apply cloud security best practices across applicable cloud deployment and service models. Provide independent technical guidance on cloud security, compliance, and risk management to engineering and program stakeholders. Develop and support security documentation and evidence required for assessment, authorization, and ongoing compliance activities.