AWS Cloud Security Engineer

Role Overview

Location:

Stafford, Virginia (Hybrid)

We are seeking an AWS Cloud Security Engineer to support a mission‑critical program for a federal government agency. This role involves designing, implementing, and maintaining a secure AWS cloud infrastructure for application development and operations. You will serve on the Security & Infrastructure team, responsible for AWS cloud environments spanning development, test, pre‑production, and production.

• Design, build, and maintain AWS infrastructure, including EC2, IAM, VPC networking, security groups, and AMI lifecycle management.
• Provision and manage infrastructure as code using Cloud Formation.
• Implement and validate security settings and hardening across cloud infrastructure, operating system baselines, and application platforms.
• Provide AWS network and security support, including subnet design, security group configuration, and encryption management.
• Design and maintain least‑privilege IAM roles and policies, and remediate findings from security tools like IAM Access Analyzer, Security Hub, and Guard Duty.
• Implement NIST SP 800-53 security controls within the cloud environment and contribute technical content to authorization packages.
• Support security assessments by producing evidence, responding to questions, and driving remediation activities.
• Collaborate with development and infrastructure teams to ensure stable, current, and available environments.
• Participate in Agile ceremonies, refine stories, and provide estimates for infrastructure and security work.
• Troubleshoot environment and pipeline issues, documenting the root cause and resolution.

• A minimum of 3 years of hands‑on experience in AWS cloud engineering, including administering EC2, IAM, VPC, and AMIs.
• Experience supporting federal security compliance efforts, including NIST 800-53, the Risk Management Framework (RMF), and contributing to security documentation for an accredited system.

• Demonstrated experience with security settings implementation and system hardening.
• Proficiency in a scripting language such as Power Shell or Bash.
• Experience using or managing Git‑based version control.

A current Security+ certification or the ability to obtain one within 6 months of starting.

• Experience working with Kubernetes and container images.
• Experience with federal cloud security environments supporting mission‑critical applications.
• System Administration experience.

Everforth Apex is a world‑class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including Clearly Rateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.

• Medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection.
• ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure.
• HSA (Health Savings Account on the HDHP plan) and a Support Linc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On‑demand training program, access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification…