Information System Security Officer (Cloud)

LMI is seeking an Information System Security Officer (Cloud) to support cloud cybersecurity operations for the U.S. Army Center for Initial Military Training's (CIMT) Holistic Health & Fitness Management System (H2FMS). H2FMS is hosted in Army GovCloud and integrates the vendor-developed H2F data capture application with secure cloud services, data infrastructure, analytics, and UI capabilities. This position requires the ability to obtain and maintain a Secret clearance. You must be a U.S. citizen.

The Cloud ISSO will support RMF and continuous ATO requirements for cloud infrastructure, ensuring secure configuration, monitoring, vulnerability management, and compliance across compute, storage, identity, and network layers. This role works closely with the Senior ISSM, Cloud Architect, DevSecOps Engineers, Data Engineers, and Army cybersecurity offices.

LMI is a new breed of digital solutions provider dedicated to accelerating government impact with innovation and speed. Investing in technology and prototypes ahead of need, LMI brings commercial-grade platforms and mission-ready AI to federal agencies at commercial speed.

Leveraging our mission-ready technology and solutions, proven expertise in federal deployment, and strategic relationships, we enhance outcomes for the government, efficiently and effectively. With a focus on agility and collaboration, LMI serves the defense, space, healthcare, and energy sectors-helping agencies navigate complexity and outpace change. Headquartered in Tysons, Virginia, LMI is committed to delivering impactful results that strengthen missions and drive lasting value.

Assist in implementing and validating cloud-related RMF controls across IL4/IL5 environments.
• Support the development and maintenance of SSP cloud sections, architecture diagrams, and compliance evidence.
• Conduct continuous monitoring activities, including control testing and documentation.
• Validate secure configuration of cloud services including compute, networking, IAM, storage, and Kubernetes/containerized workloads.
• Apply DISA STIGs, CIS benchmarks, and cloud-native security policies.
• Assist in implementing Zero Trust-aligned cloud security practices.
• Conduct vulnerability scanning across cloud hosts, containers, and services.
• Support remediation tracking, POA&M updates, and vulnerability closure.
• Assist in log aggregation, SIEM tuning, and anomaly detection for cloud events.
• Validate secure deployment patterns, network boundaries, IAM roles, and API gateways associated with vendor H2F application integration.
• Ensure data flows, encryption practices, and cloud security boundaries meet Army requirements.
• Review cloud logs, event analytics, GuardDuty/Security Hub/Sentinel findings for potential threats.
• Support incident response activities and cloud-focused investigations.
• Help maintain compliance with cATO requirements in Army GovCloud.
• Maintain cybersecurity evidence, system configuration documentation, and monitoring reports.
• Assist the ISSM during assessments, inspections, and ATO reviews.
• Work closely with Cloud Engineers, DevSecOps, and Cybersecurity Engineers to validate secure system design.
• Participate in Agile sprints and offer cloud security input into engineering work items.

Required

• Bachelor's degree in Cybersecurity, Information Assurance, Cloud Engineering, Computer Science, or related field.
• 3-6 years of experience supporting cybersecurity operations for cloud environments.
• Experience with AWS GovCloud, Azure IL4/IL5, or DoW cloud security controls.
• Familiarity with RMF, STIGs, CIS benchmarks, IAM, network security, and cloud-native security tools.
• DoW 8140 elevated privileges certification (Security+, CySA+, CCNA Security, etc.).
• Ability to obtain and maintain a Secret clearance. You must be a U.S. citizen.
• Location: Remote.
• Travel: Up to 1-2 times per quarter to Fort Eustis, VA or LMI HQ in Tysons, VA.

Desired

• Experience supporting Army cybersecurity governance or enterprise cloud teams.
• Experience with Kubernetes/EKS/AKS security, container hardening, and secrets management.
• Experience supporting RMF ATO or cATO packages.
• Certifications such as AWS Security, Azure Security Engineer, CCSP, or equivalent.

Target salary range: $90,270 - $155,000

Disclaimer:

The salary range displayed represents the typical salary range for this position and is not a guarantee of compensation. Individual salaries are determined by various factors including, but not limited to location, internal equity, business considerations, client contract requirements, and candidate qualifications, such as education, experience, skills, and security clearances.