Cloud Security Engineer

CLOUD SECURITY ENGINEER

Location: Washington, DC (Primarily Onsite)

Clearance Required: Active Secret (Top Secret eligibility preferred)

Employment Type: Full-Time

--------------------------------------------------------------------------------

ROLE OVERVIEW

We are seeking a Cloud Security Engineer to help design, build, and secure cloud

environments supporting a mission-critical federal program. This role focuses on

hands-on cloud security implementation and DevSecOps integration, working

alongside platform engineers, developers, and compliance teams to embed security

into cloud solutions from the start.

This is an excellent opportunity for a cloud or security engineer looking to

deepen their cloud security expertise, gain exposure to regulated environments,

and grow into more senior security or architecture roles.

--------------------------------------------------------------------------------

KEY RESPONSIBILITIES

CLOUD SECURITY ENGINEERING

* Implement and maintain security controls in AWS, Azure, or GCP environments,

including commercial and government cloud regions.

* Apply and maintain security baselines aligned with CIS Benchmarks, NIST

800-53, and FedRAMP requirements.

* Contribute to secure architecture reviews and provide practical guidance for

cloud workloads.

--------------------------------------------------------------------------------

DEVSECOPS & AUTOMATION

* Develop and maintain Infrastructure as Code (Terraform preferred) to deploy

and manage security configurations.

* Integrate security tooling into CI/CD pipelines, including SAST, DAST, IaC

scanning, and container security.

* Build and improve automated guardrails and remediation workflows under senior

engineer guidance.

--------------------------------------------------------------------------------

MONITORING, COMPLIANCE & RESPONSE

* Implement centralized logging and monitoring to improve visibility across

cloud environments.

* Support compliance and ATO efforts by embedding controls into cloud

deployments and assisting with audit evidence.

* Participate in vulnerability remediation and incident response activities.

--------------------------------------------------------------------------------

COLLABORATION & GROWTH

* Collaborate with cloud engineers, developers, and compliance teams to ensure

security objectives are met.

* Serve as a hands-on resource for cloud security best practices within project

teams.

* Learn and apply advanced cloud security patterns through mentorship and

real-world delivery.

--------------------------------------------------------------------------------

REQUIRED QUALIFICATIONS

* Active Secret clearance

* Bachelor’s degree in Computer Science or related field, or equivalent

experience

* 3–5 years of experience in cybersecurity or cloud engineering, with at least

2 years focused on cloud security

* Hands-on experience with at least one major cloud provider (AWS, Azure, or

GCP)

* Experience with cloud-native security tools (e.g., Security Hub, Defender for

Cloud, Google SCC)

* Experience with Infrastructure as Code (Terraform, CloudFormation, or

similar)

* Basic scripting experience (Python, PowerShell, or Bash)

* Working knowledge of IAM, encryption, networking, and key management

* Familiarity with security frameworks such as NIST, CIS, or FedRAMP

--------------------------------------------------------------------------------

PREFERRED QUALIFICATIONS

* Experience integrating security into CI/CD pipelines

* Exposure to container security or Kubernetes hardening

* Cloud security certifications (AWS, Azure, or Google)

* Familiarity with zero trust principles and enterprise identity platforms

--------------------------------------------------------------------------------

WHY JOIN US

* Hands-on role with real ownership in a regulated cloud environment

* Opportunity to grow into senior cloud security or architecture positions

* Mission-driven federal program with long-term stability

* Collaborative team environment with mentorship and technical depth