AWS Cloud Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
AWS Cloud Security Engineer securing Peraton’s FedRAMP-authorized AWS infrastructure. Implementing cloud controls, continuous compliance, and ATO support for national security missions.
Responsibilities:
- Design and implement security architecture for AWS workloads aligned with FedRAMP Moderate baseline controls
- Build and maintain AWS security guardrails using IAM, GuardDuty, Security Hub, Config, CloudTrail, KMS, WAF, Macie, and Inspector
- Implement and manage Infrastructure as Code security controls using Terraform or CloudFormation with policy as code
- Support System Security Plans, Authorization to Operate activities, and POA&M remediation
- Perform continuous monitoring, vulnerability scanning, patch management tracking, and monthly/annual assessment support
- Configure and maintain centralized logging, SIEM integration, and audit trail retention according to FedRAMP/NIST requirements
- Implement least-privilege IAM policies, service control policies, and cross-account access controls
- Manage encryption at rest and in transit using KMS, ACM, and TLS enforcement per applicable FIPS requirements
- Respond to security incidents, perform root cause analysis, and support cloud-specific incident response playbooks
- Collaborate with DevOps and Platform teams to embed security into CI/CD pipelines through DevSecOps
- Maintain control implementation statements, architecture diagrams, and audit evidence documentation
- Support boundary definition and system categorization activities under FIPS 199
Requirements:
- US citizenship required
- Ability to obtain and maintain a Top-Secret eligible clearance
- Minimum 8 years work experience with BS/BA in computer science, Information Systems, or a related field (or equivalent experience)
- 5+ years of hands-on AWS engineering experience, with 3+ years specifically in cloud security roles
- Experience working within a FedRAMP Moderate or FedRAMP High, DoD IL4/IL5, or equivalent federal compliance environment
- Experience supporting or maintaining an SSP and RMF processes
- Experience with AWS GovCloud (US), AWS Commercial, or equivalent federal AWS environments
- Hands-on expertise with AWS security services including IAM, GuardDuty, Security Hub, AWS Config, CloudTrail, KMS, WAF, Macie, Inspector, and Systems Manager
- Understanding of NIST SP 800-53 Rev 5 control families and ability to map implementations to specific controls
- 3+ years of experience with Infrastructure as Code using Terraform and/or CloudFormation, including security scanning and policy-as-code tools
- Networking security fundamentals including VPC design, security groups, NACLs, PrivateLink, Transit Gateway, and network segmentation
- Experience with vulnerability management tools and remediation tracking
- Experience implementing Zero Trust Architecture in AWS
- Familiarity with SIEM/log aggregation tools such as Splunk, AWS CloudWatch, and OpenSearch
- Scripting ability in Python or Bash
- Understanding of FIPS 140-2/140-3 and TLS 1.2+
- One of AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional with a security focus, CISSP, CISM, or Security+ with strong AWS hands-on experience
- Preferred: Direct experience supporting a Peraton program or similar federal integrator
- Preferred: Familiarity with server and systems hardening software
- Preferred: Experience with container security, AWS Control Tower, continuous ATO evidence collection, regulated change management, AWS AI services, hybrid/multi-cloud architecture, Microsoft .NET, DevSecOps pipelines, AI security and governance frameworks, and federal agencies or large GovCon programs
Benefits:
- Discretionary bonus may be available in addition to base pay
- Overtime may be available
- Shift differential may be available
Similar Jobs
Security Engineer – CrowdStrike Falcon
Senior CrowdStrike CNAPP engineer configuring cloud, Kubernetes, and container security for a cybersecurity consulting firm. Securing government and enterprise environments through hands-on Falcon implementation.
Technical Advisor II – Food Security, Livelihoods and Markets
Remote CRS technical advisor leading Sudan’s World Bank-funded Food and Nutrition Security Plan. Advising global food security, livelihoods, and market-based humanitarian programming.
Manager, Application Security, SOX
Application Security and SOX Manager securing Oracle Fusion, EPM, and OIC environments. Ensuring access governance, Segregation of Duties, and compliance for Paramount’s global media business.
Senior Manager, Application and Pipeline Security
Senior Manager leading Nielsen’s application and pipeline security for its media insights business. Driving AWS governance, AI-driven DevSecOps, automated remediation, and security engineering team performance.
Senior Security Engineer
Senior Security Engineer monitoring and responding to threats across Cision’s cloud, identity, endpoint, and Linux environments. Cision provides PR, marketing, and social media management technology.
Information Security Control Assurance Analyst
Information security analyst assuring controls, audits, and compliance for Southern New Hampshire University. Managing risk assessments, SSPs, POA&Ms, audits, and governance reporting remotely.
Security Engineer – Manager
Security Engineering Manager leading zero-trust, IAM, collaboration, and AI workspace security for Binance’s global blockchain ecosystem. Building secure platforms and leading distributed engineering teams.
Principal Security Engineer
Principal Security Engineer reviewing FedRAMP cloud architectures, authorization packages, and security controls. Advising government programs and Cloud Service Providers on NIST compliance and risk.
Senior Cybersecurity Risk & Resilience Consultant
Senior cybersecurity risk consultant assessing technology, cloud, and third-party risks. Strengthening risk frameworks and advising stakeholders on resilience, compliance, and remediation.
Senior Cybersecurity Governance Consultant
Senior Cybersecurity Governance Consultant strengthening an organization’s cybersecurity frameworks, policies, controls, and compliance. Managing governance reporting, exceptions, audits, and regulatory-readiness initiatives.
Cybersecurity Compliance, Technical Controls Consultant
Cybersecurity consultant assessing technical controls, cloud, infrastructure, and regulatory compliance. Managing audits, remediation, evidence, policies, and metrics for a two-year engagement.
Fraud Security Specialist
Fraud Security Specialist protecting CoinPoker’s blockchain-based crypto-poker platform from fraud, money laundering, cheating, and account abuse. Investigating cases, managing transaction queues, and reporting fraud trends.
Senior/Lead – Cyber Security – IAM Engineer, Identity and Governance
Lead IAM Engineer designing cloud-based identity governance and access platforms for FICO, a global analytics software company. Strengthening enterprise security through IAM, PAM, federation, and least-privilege controls.
Information Security Engineer
Information Security Engineer supporting Cisco’s cloud compliance certifications, audits, and security frameworks. Building scalable compliance capabilities across Cisco Cloud offerings.
Security Architect
Security Architect defining API, identity, encryption and integration controls for Intelance’s enterprise architecture and cybersecurity consultancy. Delivering a focused UK programme security review remotely.
Application Security Researcher
Application Security Researcher researching vulnerabilities and autonomous penetration testing for OX Security’s AI-driven security platform. Building detection engines and shipping offensive-security capabilities to production.
Information Security Consultant – m/f/d
Information Security Consultant advising technology-driven Cloud, AI, and Data Center companies in Germany. Building audit-ready ISMS and compliance solutions with customers.
Senior Manager, Security Channel – Market Growth, Splunk
Leading partner go-to-market strategy for Cisco’s Splunk Security portfolio. Scaling launches, sales plays, and readiness programs across global security channel partners.
Senior Manager, Security Channel – Market Growth, Splunk
Security channel growth manager scaling Splunk cybersecurity partner go-to-market motions at Cisco. Driving market readiness, launches, enablement, and partner-led growth across U.S. remote locations.
Senior Director, Product, Security and Privacy
Product Counsel guiding product, privacy, security, and open-source legal strategy for Neo4j’s graph intelligence platform. Enabling compliant innovation across enterprise software, cloud, and AI products.