Cloud Cybersecurity Specialist - Senior at BDR Solutions, LLC – Herndon | Jobyssey

About us:

BDR Solutions, LLC, (BDR) supports the U.S. Federal Government in successfully achieving its mission and goals. Our service and solution delivery starts with understanding each client’s end-state, and then seamlessly integrating within each Agency’s organization to improve and enhance business and technical operations and deployments.

(Military Veterans are highly encouraged to apply)

Role Overview:

BDR Solutions LLC is seeking an experienced Cloud Cybersecurity Specialist to provide security oversight for a high-security IRS AWS and Databricks environment. This role is responsible for monitoring platform security, supporting ATO and continuous monitoring activities, and ensuring compliance with FedRAMP High, NIST 800-53, and IRS security standards.

The ideal candidate will bring strong expertise in AWS security tooling, incident response, and GRC practices, while partnering directly with federal stakeholders to manage risk, oversee POA&M activities, and maintain a secure, compliant cloud infrastructure.

Responsibilities:

Active MBI – mandatory; candidates in process do NOT qualify
Active IRS or Treasury cybersecurity contract experience strongly preferred
5+ years in FedRAMP High or comparable high-security AWS cloud environments
AWS Certified Security – Specialty strongly preferred
CISSP, CCSP, or CompTIA Security+ (current)
In-depth knowledge of NIST SP 800-53 Rev 5 and IRS Publication 4812
POA&M management and structured GRC environment experience
AWS security tooling: Security Hub, GuardDuty, CloudTrail, Config, IAM Access Analyzer
Experience supporting formal ATO processes and continuous monitoring programs
Working knowledge of OSCAL format for security control documentation
Comfort with a 75% contract engagement; may hold other concurrent work
Bachelor's degree in Cybersecurity, Information Technology, or related field

Required Minimum Qualifications:

Provide platform security oversight for IRS EDP in direct partnership with IRS federal security personnel
Monitor AWS/Databricks telemetry for security anomalies, IAM misconfigurations, and stale credentials
Review network controls, PrivateLink configurations, and VPC security architecture; maintain centralized alerting
Coordinate incident response for security events and serve as key liaison to IRS CSIRC
Lead entitlement reviews, key/certificate rotation, and encryption compliance oversight
Provide senior security guidance on POA&M remediation and security control implementation
Support DR/COOP tests and security audit activities alongside the Cybersecurity Analyst
Support IRS ATO renewal and continuous monitoring activities throughout the period of performance
Clearance Required: Minimum Background Investigation (MBI) — ACTIVE

Tools and Platforms:

AWS security services (Security Hub, GuardDuty, CloudTrail, Config, IAM)
SIEM tools (Splunk, ELK), GRC/ATO platforms (eMASS, Archer, ServiceNow GRC)
Vulnerability management tools (Tenable, Qualys, Inspector)
Experience with Terraform, Git, and Databricks/Lake Formation security controls.

Nice to Have Qualifications:

Experience with eMASS or GRC platforms
AWS Organizations and Control Tower
Advanced VPC/PrivateLink architectures
OSCAL implementation
Databricks security
SIEM tools (Splunk/ELK)
Automation using Python or Terraform.

In addition, U.S Citizenship is required. Select applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information and be able to obtain a government-granted security clearance. Individuals may also be subject to a background investigation including, but not limited to criminal history, employment and education verification, drug testing, and creditworthiness.

This position is contingent upon contract award. Employment is not guaranteed and will proceed only if the associated contract is awarded and funded.

The compensation range for this position is $80,000-130,000. Compensation decisions depend on a wide range of factors, including but not limited to location, skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

Explore more jobs