Cloud Security Engineer - Aws Govcloud​/Multi-Cloud

Cloud Security Engineer – AWS Gov Cloud / Multi-Cloud Position Overview

We are looking for a highly talented, technical, hands‑on Cloud Security Engineer to help accelerate our growing Professional Services business within the Government Sector.

You will build and operate the secure cloud foundation and security automation that produces continuous control evidence across AWS - and Azure/GCP as the environment expands - enforcing guardrails as code and remediating drift in near real time for a federal continuous Authorization to Operate (cATO) program.

• Cloud Infrastructure-as-Code: Build and maintain AWS Gov Cloud/Commercial IaC (Terraform, Ansible) across Production, Staging, Test, and Integration tiers.
• Cloud-Native Security Services: Operate Security Hub, Guard Duty, and Config; run cloud security posture management (CSPM) across AWS plus Azure/GCP.
• Security Automation: Architect event‑driven alerting (identity event hooks to serverless functions and notifications), privileged‑access monitoring, and drift auto‑remediation.
• Hardening & Compliance: Implement credentialed scanning, WAF/IP allow listing, and least‑privilege access; maintain a FedRAMP‑aligned compliance posture.
• Pipelines & Observability: Maintain CI/CD pipelines (Jenkins + Terraform + Ansible) and observability (Splunk, Cloud Watch) for cloud control evidence.

• High level of attention to detail, needs minimal guidance, effective verbal and written communication.
• 8+ years delivering federal cloud infrastructure on AWS Gov Cloud, with hands‑on Terraform/IaC across multiple environment tiers.
• Multi‑cloud breadth: architecture‑level proficiency across AWS and at least one of Azure or GCP.
• Cloud security automation: serverless/event‑driven controls, identity‑event integration, and drift remediation.
• FedRAMP‑aligned operations - credentialed scanning, WAF, and least‑privilege access management.
• Scripting in Python and Bash; CI/CD (Jenkins) and observability (Splunk/Cloud Watch).
• CSPM/CNAPP tooling (e.g., Prisma Cloud) and Okta/Entra n a plus.

• Bachelor of Science (or higher) in computer engineering, computer science, information technology, cyber security, or a related field.
• Another major will be considered, provided it clearly addresses at least one of the following: cyber security engineering, systems administration, information systems security, software development security, systems engineering, information systems, or information technology.

• None required.

• No Clerance required, but an active Secret Clearance is preferred.

• Primary location(s) are Arlington and Alexandria VA. Remote work is authorized, but the employee may have to report to one of the primary sites occasionally or as requested by management or the client.

• 6:00 am ET – 6:00 pm ET

• $155,000 - $190,000+

• Ability to pass a minimum background investigation.