Sr Cloud Security Engineer

Req

Type of Requisition:
Regular

Clearance Level Must Be Able to Obtain:
None

Public Trust/Other

Required:

NACI (T1)

Job Family: IT Infrastructure and Operations

Skills:

Amazon Web Services (AWS) Security,AWS Network Firewall,AWS Web Application Firewall (WAF),Network Security,Security Engineering

Experience:

5 + years of related experience

Job Description:

We are seeking an experienced Senior Cloud Security Engineer to design, implement, operate, and continuously improve security infrastructure across on-premises data centers and AWS environments supporting business and critical scientific workloads.

The ideal candidate is a hands‑on engineer with strong expertise in AWS security, Palo Alto Networks firewalls, hybrid‑cloud security architecture, Infrastructure as Code (IaC), and security automation. This role operates across both architecture and implementation - from defining security patterns and policies to configuring infrastructure, troubleshooting complex issues, and automating security operations.

This role is fully remote!

This role requires you to obtain and maintain a Public Trust and to provide onsite fingerprinting at a designated facility. This investigation may review personal and criminal behavior, financial conduct, foreign influence, as well as other adjudications.

• Design and implement security controls for AWS multi‑account and hybrid‑cloud environments.
• Deploy and manage AWS security capabilities, including Network Firewall, WAF, Shield, Security Groups/NACLs, Guard Duty, Security Hub, Cloud Trail, Config, IAM/Identity Center, KMS, VPC, and Transit Gateway controls.
• Design secure connectivity, segmentation, and security boundaries between AWS and on‑premises environments.

• Develop secure, resilient architectures spanning AWS and on‑premises infrastructure using defense‑in‑depth and Zero Trust principles.
• Modernize environment to leverage Infrastructure as Code using technologies such as Terraform.
• Automate security operations, compliance reporting, configuration management, and policy enforcement using APIs, scripting, Dev Sec Ops  tooling, and AI‑assisted engineering tools.
• Support security controls and evidence mapping aligned with frameworks such as NIST 800-53/800-171, FedRAMP, and FISMA.
• Evaluate existing security architectures and identify improvements in security, resiliency, scalability, performance, and operational efficiency.

• Troubleshoot complex cloud, network, firewall, and application‑connectivity issues.
• Support security incidents, production outages, and root‑cause analysis.
• Develop monitoring, logging, alerting, dashboards, runbooks, and engineering standards.
• Perform performance tuning, capacity planning, and security infrastructure lifecycle management.
• Participate in on‑call or escalation support as required.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent professional experience.
• 5+ years of hands‑on cloud security engineering experience.
• Demonstrated experience designing, deploying, managing, and troubleshooting AWS security services.
• Experience securing hybrid on‑premises/AWS environments.
• Experience with Infrastructure as Code, scripting and security automation.
• Strong understanding of networking and security fundamentals, including TCP/IP, DNS, HTTP/HTTPS, network segmentation, VPNs, TLS/PKI, encryption, IAM, Zero Trust, and threat detection/prevention.
• Experience troubleshooting complex security and network issues.
• Must be able to obtain and maintain a Public Trust.

• Experience with Palo Alto Panorama, Prisma Cloud, and/or related Palo…