Senior Security Subject Matter Expert (Cloud & Security)

Company Overview By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide. Position Overview Security Subject Matter Expert (SME) to support secure cloud systems in Federal and DoD environments. This role is responsible for designing, implementing, and maintaining security controls across cloud infrastructure, cybersecurity operations systems while supporting compliance with industry and government standards. The ideal candidate has hands-on cloud security experience, a strong understanding of risk and compliance, and the ability to secure emerging technologies. Responsibilities Design, implement, and maintain security controls across system development and operations. Secure AWS-based cloud environments; provide working knowledge of Azure and/or Google Cloud. Perform system hardening, vulnerability scanning, monitoring, and incident response. Analyze logs, develop alerts, and support forensic investigations. Support security architecture design and integration for new and existing systems. Provide support and oversight for systems, including: Patching selection and updates Training data security and integrity Network monitoring, access controls, and monitoring Review and approval of AI-related changes and updates Support compliance activities aligned with CMMC Level 2, SOC 2, and ISO/IEC 27001. Contribute to security documentation, risk assessments, and audit readiness efforts. Required Experience/Qualifications Bachelor’s degree (or equivalent experience) plus 3+ years of relevant security experience Hands-on experience securing on-premise/AWS environments Experience with cloud security and enterprise security tools Proficiency in Python for automation or security tooling Preferred Experience/Qualifications CompTIA Security+ GIAC GICSP CompTIA Network+ ITIL Experience supporting Federal, DoD, or regulated environments Familiarity with AI/ML systems or emerging technology security Special Requirements/Security Clearance Active Top Secret w/Poly clearance