Federal Senior Cloud Security Engineer

Role overview

As a Federal Senior Cloud Security Engineer, you will analyze, design, configure, implement, and validate security solutions for AWS GovCloud. You will partner with federal/security leadership and engineering teams to ensure a secure and compliant cloud architecture.

Key missions

• Security engineering for AWS GovCloud: analyze, design, configure, implement, and validate security solutions.
• Guardrails & detection: develop security guardrails, automate threat detection, and manage the end-to-end security lifecycle within the CI/CD pipeline.
• Security controls across AWS: design and implement controls covering:
  • AWS IAM and IAM policies
  • SCPs
  • VPC security
  • S3 bucket policies
  • Key management

Requirements

• AWS expertise and security architecture knowledge across AWS services.
• Security framework fluency: familiarity with NIST, CIS, and MITRE ATT&CK.
• Analytical & incident-focused skills: log processing, event analysis, and incident management.
• Automation: in-depth knowledge of Terraform and GitLab CI/CD strategies.
• Communication: strong verbal and written skills; ability to explain technical concepts to non-technical stakeholders.
• Experience: minimum 5 years securing AWS environments and 5+ years general cybersecurity experience.
• Certifications: AWS Certified Security (specialty preferred); CISSP or related certifications preferred.
• Authorization/clearance: must be authorized to work in the U.S. and pass a criminal background check; U.S. Government Security Clearance is a plus.
• Education: Bachelor’s in Computer Science or Cybersecurity; military service equivalent accepted.

Nice to haves

• U.S. Government Security Clearance.