Job description

Description About us: BDR Solutions, LLC, (BDR) supports the U.S. Federal Government in successfully achieving its mission and goals. Our service and solution delivery starts with understanding each client’s end-state, and then seamlessly integrating within each Agency’s organization to improve and enhance business and technical operations and deployments. (Military Veterans are highly encouraged to apply) Role Overview: BDR Solutions LLC is seeking an experienced Cloud Cybersecurity Specialist to provide security oversight for a high-security IRS AWS and Databricks environment. This role is responsible for monitoring platform security, supporting ATO and continuous monitoring activities, and ensuring compliance with FedRAMP High, NIST 800-53, and IRS security standards. The ideal candidate will bring strong expertise in AWS security tooling, incident response, and GRC practices, while partnering directly with federal stakeholders to manage risk, oversee POA&M activities, and maintain a secure, compliant cloud infrastructure. Responsibilities: • Active MBI – mandatory; candidates in process do NOT qualify • Active IRS or Treasury cybersecurity contract experience strongly preferred • 5+ years in FedRAMP High or comparable high-security AWS cloud environments • AWS Certified Security – Specialty strongly preferred • CISSP, CCSP, or CompTIA Security+ (current) • In-depth knowledge of NIST SP 800-53 Rev 5 and IRS Publication 4812 • POA&M management and structured GRC environment experience • AWS security tooling: Security Hub, GuardDuty, CloudTrail, Config, IAM Access Analyzer • Experience supporting formal ATO processes and continuous monitoring programs • Working knowledge of OSCAL format for security control documentation • Comfort with a 75% contract engagement; may hold other concurrent work • Bachelor's degree in Cybersecurity, Information Technology, or related field Required Minimum Qualifications: • Provide platform security oversight for IRS EDP in direct partnership with IRS federal security personnel • Monitor AWS/Databricks telemetry for security anomalies, IAM misconfigurations, and stale credentials • Review network controls, PrivateLink configurations, and VPC security architecture; maintain centralized alerting • Coordinate incident response for security events and serve as key liaison to IRS CSIRC • Lead entitlement reviews, key/certificate rotation, and encryption compliance oversight • Provide senior security guidance on POA&M remediation and security control implementation • Support DR/COOP tests and security audit activities alongside the Cybersecurity Analyst • Support IRS ATO renewal and continuous monitoring activities throughout the period of performance • Clearance Required: Minimum Background Investigation (MBI) — ACTIVE Tools and Platforms: • AWS security services (Security Hub, GuardDuty, CloudTrail, Config, IAM) • SIEM tools (Splunk, ELK), GRC/ATO platforms (eMASS, Archer, ServiceNow GRC) • Vulnerability management tools (Tenable, Qualys, Inspector) • Experience with Terraform, Git, and Databricks/Lake Formation security controls. Nice to Have Qualifications: • Experience with eMASS or GRC platforms • AWS Organizations and Control Tower • Advanced VPC/PrivateLink architectures • OSCAL implementation • Databricks security • SIEM tools (Splunk/ELK) • Automation using Python or Terraform. In addition, U.S Citizenship is required. Select applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information and be able to obtain a government-granted security clearance. Individuals may also be subject to a background investigation including, but not limited to criminal history, employment and education verification, drug testing, and creditworthiness. This position is contingent upon contract award. Employment is not guaranteed and will proceed only if the associated contract is awarded and funded. The compensation range for this position is $80,000-130,000. Compensation decisions depend on a wide range of factors, including but not limited to location, skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

Requirements

Must-haves

Active MBI – mandatory; candidates in process do NOT qualify
5+ years in FedRAMP High or comparable high-security AWS cloud environments
CISSP, CCSP, or CompTIA Security+ (current)
In-depth knowledge of NIST SP 800-53 Rev 5 and IRS Publication 4812
POA&M management and structured GRC environment experience
AWS security tooling: Security Hub, GuardDuty, CloudTrail, Config, IAM Access Analyzer
Experience supporting formal ATO processes and continuous monitoring programs
Working knowledge of OSCAL format for security control documentation
Comfort with a 75% contract engagement; may hold other concurrent work
Bachelor's degree in Cybersecurity, Information Technology, or related field
Provide platform security oversight for IRS EDP in direct partnership with IRS federal security personnel
Monitor AWS/Databricks telemetry for security anomalies, IAM misconfigurations, and stale credentials
Review network controls, PrivateLink configurations, and VPC security architecture; maintain centralized alerting
Coordinate incident response for security events and serve as key liaison to IRS CSIRC
Lead entitlement reviews, key/certificate rotation, and encryption compliance oversight
Provide senior security guidance on POA&M remediation and security control implementation
Support DR/COOP tests and security audit activities alongside the Cybersecurity Analyst
Support IRS ATO renewal and continuous monitoring activities throughout the period of performance
Clearance Required: Minimum Background Investigation (MBI) — ACTIVE
AWS security services (Security Hub, GuardDuty, CloudTrail, Config, IAM)
SIEM tools (Splunk, ELK), GRC/ATO platforms (eMASS, Archer, ServiceNow GRC)
Vulnerability management tools (Tenable, Qualys, Inspector)

Nice-to-haves

Active IRS or Treasury cybersecurity contract experience strongly preferred
AWS Certified Security – Specialty strongly preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awspython

Platform: comeet
Effort: medium