Cloud Security Engineer

Job Family:
Software Development & Support

Travel Required:

Up to 10%

Clearance Required:

Ability to Obtain Public Trust

• Design, implement, and maintain security controls across AWS cloud environments.
• Safeguard cloud workloads by applying best practices for identity management, monitoring, threat detection, and secure operations.
• Develop secure AWS architectures using services such as IAM, KMS, Cloud Trail, Config, and supporting monitoring tools such as Sentry and Datadog.
• Implement centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and penetration testing practices.
• Ensure AWS environments align with applicable security and compliance frameworks, including CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2.
• Support incident detection, investigation, and response while maintaining audit trails across AWS accounts and services.
• Automate security controls and compliance checks using Infrastructure as Code tools such as Terraform and Cloud Formation.
• Integrate security into CI/CD pipelines and collaborate with engineering teams to enable secure build and deployment processes.

• U.S. Citizenship or Green Card required, with the ability to obtain a Public Trust clearance.
• Bachelor’s degree in computer science, cybersecurity, engineering, or a related field; four additional years of relevant experience may be substituted in lieu of a degree.
• Minimum 6 years of relevant experience in cloud security, cybersecurity and AWS security.
• Strong knowledge of AWS services, including EC2, S3, RDS, Lambda, ECS/EKS, Cloud Front, Route 53, IAM, Cloud Trail, Config, and KMS.
• Experience supporting secure CI/CD pipelines, deployment automation, build troubleshooting, release coordination, and developer enablement.
• Hands-on experience with Git Hub Actions, AWS Code Build, ArgoCD, Helm, Docker, secrets management, environment configuration, and Terraform templates.
• Ability to validate account handoffs, review pipeline configurations, verify secrets, support deployment dry runs, and assist with cutover and rollback planning.
• Strong scripting or development experience with Python, Bash, or similar languages.
• Proven ability to work independently and collaborate with cross-functional teams to solve complex security, operational, and reliability challenges.

• AWS Certified Security – Specialty (Highly desirable).
• AWS Certified Solutions Architect or Dev Ops Engineer certifications.
• CISSP, CISM or GIAC certifications.

The annual salary range for this position is $92,000.00-$. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Parental Leave
• 401(k) Retirement Plan
• Group Term Life and Travel Assistance
• Voluntary Life and AD&D Insurance
• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
• Transit and Parking Commuter Benefits
• Short-Term & Long-Term Disability
• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• annual membership
• Employee Assistance Program
• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and  protection, etc.)

Position may be eligible for a discretionary variable…