Federal Senior Cloud Security Engineer

• The Sr. Cloud Security Engineer, Federal performs the tasks necessary to analyze, design, configure, implement, and validate security solutions for H3’s AWS Gov Cloud infrastructure
• This role serves as a technical leader and “self-starter,” working closely with the Director of Federal Operations, Security Operations Manager, and engineering teams to ensure a secure and compliant cloud architecture
• Tasks will consist of developing security guardrails, automating threat detection, and managing the end-to-end security lifecycle within the CI/CD pipeline. This position prioritizes Federal AWS environments and compliance (FedRAMP, IL-4/5) while providing subject matter expertise and support for commercial cloud security as the Federal Team grows
• Cloud Security Engineering:
  Design and implement robust security controls across AWS environments, including AWS IAM, SCPs, VPC security, S3 bucket policies, and key management
• Infrastructure as Code (IaC):
  Utilize Terraform to deploy and manage security configurations, ensuring “Security as Code” is integrated into all cloud deployments
• Dev Sec Ops  Integration:
  Implement and maintain Git Lab CI/CD pipelines for automated security testing and scanning of AWS resources
• Posture Management & Monitoring:
  Continuously monitor and improve cloud security posture by managing and tuning services such as Guard Duty, Security Hub, AWS WAF, and Cloud Trail
• Identity & Access Management:
  Define and enforce IAM best practices, including least privilege, federated identity, RBAC, and automated remediation of deficiencies
• Threat Modeling & Assessment:
  Conduct architecture reviews and risk assessments for new cloud features to identify and mitigate vulnerabilities before deployment
• Incident Response & Analysis:
  Investigate suspected attacks and lead security incident management, providing post-mortem analysis and developing long-term preventive measures
• Compliance & Standards:
  Develop and maintain security policies and procedures to ensure compliance with FedRAMP and DoD IL-4/5
• Reporting & Metrics:
  Develop creative reporting mechanisms and metrics to communicate cloud risk and security themes to business owners and leadership

• Growth Opportunities:
  Be part of a dynamic and growing team with numerous career advancement opportunities
• Innovation-Driven Culture:
  Work in a collaborative environment that encourages creativity and out-of-the-box thinking
• Inclusive and Diverse Team:
  We value diversity and promote an inclusive culture where everyone can thrive
• Flexible Work Environment:
  Enjoy the convenience and work-life balance that comes with remote work

Framework Fluency:
Familiarity with cybersecurity frameworks such as NIST, CIS, and MITRE ATT&CK

Integrity & Ownership:
Demonstrated commitment to process improvement, technical integrity, and a “learn-it-all” attitude

AWS Expertise:
Deep knowledge of AWS services and security architecture

Communication:
Excellent verbal and written skills, with the ability to explain complex technical concepts to non-technical stakeholders

Analytical Problem Solving:
Excellent skills in log processing, event analysis, and incident management

Automation Proficiency:
In-depth knowledge of Terraform and Git Lab CI/CD strategies

Certifications:

AWS Certified Security - Specialty preferred; CISSP or relevant security certifications preferred

Education:

Bachelor’s degree in Computer Science or Cybersecurity;
Military Service Equivalent Clearance/Auth:
Must be authorized to work in the U.S. and pass a criminal background checkU.S. Government Security Clearance is a plus

Experience:

Minimum five (5) years of experience in securing AWS environments; 5+ years of general cybersecurity experience