Journeyman Cloud Security Engineer

Zachary Piper Solutions
is seeking a
Journeyman Cloud Security Engineer
to support the NNSA in safeguarding the nation's nuclear security infrastructure. This is a
contract-to-hire
opportunity based out of
Las Vegas, Nevada
for cleared senior professionals to lead proactive, AI-augmented defense of mission-critical hybrid cloud environments on multi-million-dollar federal contracts. As a
Journeyman Cloud Security Engineer
, you'll drive RMF compliance, automate NIST controls, and mentor teams within operations at the NNSA.

Responsibilities for the Journeyman Cloud Security Engineer include:

• Lead RMF package development in eMASS for Azure/AWS/GCP migrations and continuous ATO monitoring.
• Automate STIG/SCAP compliance and policy-as-code enforcement using Python/Boto3, Terraform, and OPA.
• Conduct proactive threat hunting with AI/ML tools (e.g., AWS Macie, Azure Sentinel) and zero-downtime vuln remediation.
• Secure DevSecOps pipelines (GitHub Actions, SonarQube, CloudFormation) and harden VMware VCF per NIST

Required qualifications for the role include:

• 5+ years in federal cloud cybersecurity or related high-assurance environments
• Expert-level RMF implementation, NIST controls, and FISMA audit leadership
• Advanced scripting/automation (Python/Bash, Boto3, Terraform) and policy-as-code (OPA)
• BA/BS degree (Computer Science, Cybersecurity, or equivalent)

Clearance:
Active DOE
"Q"
or
Top Secret (TS)
Clearance (must be current and transferable).

• Skills:

○ RMF/eMASS/POA&M mastery in cloud migrations

○ AI/ML-driven threat hunting (Macie, Sentinel)

○ Zero-downtime patching (SCCM/GPO, blue-green)

○ DevSecOps shift-left (SonarQube, IaC)

○ VMware VCF hardening (NIST supply chain)

Compensation for the Senior Cloud Security Engineer includes:

• Target salary: $120,000 (full-time equivalent)
• Full Standard Benefits: PTO, Paid Holidays, Medical, Dental, Vision, 401k plan, Sick leave as required by law

This job opens for applications on 11/13/25. Applications for this job will be accepted for at least 30 days from the posting date.

DOE Q clearance, Top Secret clearance, TS/SCI, active clearance, Nevada National Security Site, NNSS, NNSA, National Nuclear Security Administration, Las Vegas onsite, 5 days onsite, contract-to-hire, RMF, Risk Management Framework, eMASS, POA&M, NIST 800-53, AU-2, audit logging, Azure security, AWS security, GCP security, cloud migration, ATO, Authority to Operate, FISMA audit, NIST CSF, policy-as-code, OPA, Open Policy Agent, Terraform, CloudFormation, IaC, Infrastructure as Code, STIG, SCAP compliance, , vulnerability assessment, vulnerability management, prioritization, remediation scripting, Python automation, Bash scripting, Boto3, error handling, AI/ML threat hunting, AWS Macie, Azure Sentinel, anomaly detection, proactive security, zero-downtime patching, SCCM, GPO, blue-green deployment, DevSecOps, GitHub Actions, SonarQube, shift-left security, VMware VCF, VMware Cloud Foundation, hybrid cloud, NIST , supply chain risk, federal SOC, ESOC, Enterprise Security Operations Center, Deloitte partnership, SIEM architecture, cyber engineering, SOC analysts, incident response, mentorship, team leadership, cloud vuln assessment, continuous monitoring, compliance automation, federal cybersecurity, high-assurance environments, nuclear deterrence, stockpile stewardship, mission-critical systems, proactive AI threats, Q-cleared experience, cybersecurity leadership, cloud security engineer, senior cloud security, RMF implementation, FISMA compliance, security infrastructure, scripting proficiency, automation tools, security tools integration, network security, system security, federal security standards, multi-million-dollar contracts, Zachary Piper Solutions, Zen Prasertsin, Mike Ewell, Chief Growth Officer, PwC alumni, cyber ops expert, exclusive search, 24-hour feedback, technical interview panel, phone screen, resume review, offer turnaround, 120k salary, BA/BS degree, computer science degree, cybersecurity degree, onsite requirement, 24-hour notice, interview availability