Journeyman Cloud Security Engineer - Top Secret / Q Cleared

Zachary Piper Solutions is seeking a Journeyman Cloud Security Engineer to support the NNSA in safeguarding the nation’s nuclear security infrastructure. This is a contract-to-hire opportunity based out of Las Vegas, Nevada for cleared senior professionals to lead proactive, AI-augmented defense of mission-critical hybrid cloud environments on multi-million-dollar federal contracts. As a Journeyman Cloud Security Engineer , you’ll drive RMF compliance, automate NIST controls, and mentor teams within operations at the NNSA.

Responsibilities for the Journeyman Cloud Security Engineer include :

• Lead RMF package development in eMASS for Azure / AWS / GCP migrations and continuous ATO monitoring.
• Automate STIG / SCAP compliance and policy-as-code enforcement using Python / Boto3, Terraform, and OPA.
• Conduct proactive threat hunting with AI / ML tools (., AWS Macie, Azure Sentinel) and zero-downtime vuln remediation.
• Secure DevSecOps pipelines (GitHub Actions, SonarQube, CloudFormation) and harden VMware VCF per NIST 800-161.

Required qualifications for the role include :

Clearance : Active DOE “Q” or Top Secret (TS) Clearance (must be current and transferable).

○ RMF / eMASS / POA&M mastery in cloud migrations

○ AI / ML-driven threat hunting (Macie, Sentinel)

○ Zero-downtime patching (SCCM / GPO, blue-green)

○ DevSecOps shift-left (SonarQube, IaC)

○ VMware VCF hardening (NIST 800-161 supply chain)

Compensation for the Senior Cloud Security Engineer includes :

This job opens for applications on 11 / 13 / 25. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-AD1

#LI-Onsite

DOE Q clearance, Top Secret clearance, TS / SCI, active clearance, Nevada National Security Site, NNSS, NNSA, National Nuclear Security Administration, Las Vegas onsite, 5 days onsite, contract-to-hire, RMF, Risk Management Framework, eMASS, POA&M, NIST 800-53, AU-2, audit logging, Azure security, AWS security, GCP security, cloud migration, ATO, Authority to Operate, FISMA audit, NIST CSF, policy-as-code, OPA, Open Policy Agent, Terraform, CloudFormation, IaC, Infrastructure as Code, STIG, SCAP compliance, , vulnerability assessment, vulnerability management, prioritization, remediation scripting, Python automation, Bash scripting, Boto3, error handling, AI / ML threat hunting, AWS Macie, Azure Sentinel, anomaly detection, proactive security, zero-downtime patching, SCCM, GPO, blue-green deployment, DevSecOps, GitHub Actions, SonarQube, shift-left security, VMware VCF, VMware Cloud Foundation, hybrid cloud, NIST 800-161, supply chain risk, federal SOC, ESOC, Enterprise Security Operations Center, Deloitte partnership, SIEM architecture, cyber engineering, SOC analysts, incident response, mentorship, team leadership, cloud vuln assessment, continuous monitoring, compliance automation, federal cybersecurity, high-assurance environments, nuclear deterrence, stockpile stewardship, mission-critical systems, proactive AI threats, Q-cleared experience, cybersecurity leadership, cloud security engineer, senior cloud security, RMF implementation, FISMA compliance, security infrastructure, scripting proficiency, automation tools, security tools integration, network security, system security, federal security standards, multi-million-dollar contracts, Zachary Piper Solutions, Zen Prasertsin, Mike Ewell, Chief Growth Officer, PwC alumni, cyber ops expert, exclusive search, 24-hour feedback, technical interview panel, phone screen, resume review, offer turnaround, 120k salary, BA / BS degree, computer science degree, cybersecurity degree, onsite requirement, 24-hour notice, interview availability