Cloud Security Engineer

Role Overview

Senior Cloud Security Engineer (AWS GovCloud) for a remote, high-impact program supporting a leading client. This is a 5-month contract with possible extension.

Responsibilities

• Design, implement, and manage security controls in AWS GovCloud environments.
• Configure and maintain core AWS security services:
  • AWS Security Hub, GuardDuty, Macie, AWS Config
  • KMS, Secrets Manager, CloudTrail
  • Security Lake, AWS Audit Manager
• Implement IAM governance using:
  • Service Control Policies (SCPs)
  • permission boundaries
  • least-privilege access
• Automate compliance and security monitoring aligned with:
  • FedRAMP, FISMA, NIST SP 800-53, DoD IL2
• Support security hardening, vulnerability remediation, risk assessments, and audit readiness.
• Integrate with Splunk and Cribl for centralized logging, monitoring, and threat detection.

Required Skills

• 8+ years in Information Security / Cloud Security.
• 4+ years hands-on experience in AWS Security engineering.
• Strong experience with AWS GovCloud.
• Expertise with the AWS security tooling listed above (Security Hub, GuardDuty, Macie, AWS Config, KMS, Secrets Manager, IAM/SCPs, CloudTrail, Security Lake, Audit Manager).
• Experience with FedRAMP/FISMA/NIST 800-53, compliance automation, and security hardening.
• Hands-on experience with Splunk and Cribl is highly preferred.

Preferred Qualifications

• AWS Certified Security – Specialty.
• Experience with C3PAO/3PAO assessments, eMASS, RMF, and Zero Trust architectures.
• Ability to obtain a Security Clearance (preferred).