Cloud Operations

Cloud Operations Cybersecurity Jobs

24 jobs found

2d ago

Cloud Security Engineer (Secret Clearance)

Deloitte Arlington, VA

Arlington, VA

2d ago

$108k - $188k/yr Full time Azure Cloud Cloud Architecture

Apply Now

Job Description

Deloitte seeks a Cloud Security Engineer to safeguard AWS, GCP, and Azure environments for the GPS team, onsite in Arlington, VA, and requires an Active Secret Clearance.

Responsibilities

Assess cloud environments across AWS, GCP, and Azure to identify security risks, control gaps, and misconfigurations.
Design, implement, and continually improve cloud security controls, covering identity and access management, network security, encryption, logging, and monitoring.
Support cloud security architecture reviews for new and existing solutions and provide recommendations aligned to security and compliance requirements.
Investigate cloud security events, perform root-cause analysis, and support remediation activities with engineering and operations teams.
Develop and maintain technical documentation, standards, baselines, and reports related to cloud security controls and cloud risk management.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field
Active Secret Clearance
Local to the DMV area and able to work onsite up to five days per week
Travel up to 20 percent on average, depending on client and project assignments
2+ years of experience in:
- Supporting cloud security, cloud engineering, or cloud infrastructure
- Implementing or assessing security controls in AWS, GCP, and Azure
- Cloud identity and access management, network security, encryption, logging, monitoring, and configuration management
- Using cloud-native security tools, security posture management tools, or infrastructure as code tools
- Legal authorization to work in the United States without employer sponsorship now or in the future

Technologies

AWS
GCP
Azure
Python
PowerShell
Bash
Terraform
Kubernetes

Benefits

Discretionary annual incentive program

Compensation

Salary: USD 107,925 - 188,000 per year

View full job page →

3d ago

Cybersecurity Engineer

All In Solutions Remote 🌍 Remote

Remote

3d ago

Up to $150k/yr Full time Application Security Aws Govcloud Cloud

Apply Now

Job Description

Remote work opportunity with competitive compensation and the chance to safeguard a mission-critical cloud platform hosted in AWS GovCloud. This role emphasizes Zero Trust, ongoing compliance with NIST, FISMA, FIPS, HIPAA, and VA requirements, and the integration of security into the DevSecOps lifecycle. You will play a key part in shaping secure, resilient cloud capabilities across environments and authorization boundaries.

Responsibilities

Apply and maintain baseline NIST security controls across all platform environments.
Integrate SAST, DAST, SCA, container scanning, and Infrastructure as Code scanning into CI/CD pipelines.
Remediate vulnerabilities identified by scans within government-defined timelines.
Enforce secure coding standards and approved dependency management across development activities.
Implement and uphold Zero Trust Architecture and least-privilege access across all components and tenant boundaries.
Configure and manage container security including image signing, vulnerability scanning, runtime protection, and registry security.
Operate centralized secrets management with automated rotation for production secrets where automation is supported.
Support zero-trust and least-privilege controls in pipeline and deployment configurations.
Validate security control effectiveness through automated testing, configuration validation, and periodic assessments.
Support penetration testing, red team activities, and independent security assessments as required.
Implement encryption in transit and at rest across all data flows, storage, and backups using FIPS 140-3 modules.
Configure per-region KMS keys for multi-region deployments to prevent cross-region data confidentiality issues.
Support cybersecurity incident response activities in coordination with VA security operations, including forensic analysis and root-cause determination.
Implement and maintain firewall configurations, security group definitions, and network access controls in line with VA policies.
Support continuous monitoring activities including configuration validation, security event correlation, and anomaly detection.
Ensure all platform components comply with VA Critical Security Controls and are authorized before connecting to the VA network.
Support FICAM requirements including PIV-based authentication, automated provisioning, and assurance-level compliance.
Contribute to security documentation such as Security Impact Assessments, Vulnerability Management Plans, Security Assessment Plans, and Security Assessment Reports.
Participate in security audits and assessments providing technical evidence, documentation, and remediation support.
Participate in Agile and SAFe ceremonies including sprint planning, backlog refinement, demos, and retrospectives.

Requirements

Minimum 5 years of cybersecurity engineering experience in complex, mission-critical cloud environments, Federal or enterprise settings.
Hands-on experience implementing security controls in AWS, including EKS, IAM, KMS, security groups, VPC security, and encryption services.
Experience integrating SAST, DAST, SCA, and container scanning tools into CI/CD pipelines.
Strong knowledge of Zero Trust Architecture principles and practical implementation.
Experience with container security, including image scanning, runtime protection, and Kubernetes security policies.
Hands-on experience with secrets management tools such as AWS Secrets Manager, HashiCorp Vault, or Kubernetes secrets.
Familiarity with FIPS 140-3 cryptographic requirements and their cloud deployments.
Experience implementing and validating NIST SP 800-53 Rev. 5 controls.
Exposure to penetration testing, red team methodologies, and vulnerability remediation practices.
Experience with incident response including forensic analysis, evidence collection, and corrective action development.
Knowledge of Federal identity and access management requirements including FICAM, PIV, and multi-factor authentication.
Experience configuring firewalls, network security, and secure external connections in Federal cloud environments.
Understanding of HIPAA, Privacy Act, FISMA, and federal data protection requirements.
Experience working in Agile or SAFe environments with sprint-based cadences.
Certifications such as CISSP, CEH, GIAC, or equivalent are required.
AWS Security Specialty or equivalent cloud security certification preferred.
Certified Kubernetes Security Specialist (CKS) or equivalent certification preferred.
Bachelor's Degree with at least 5 years of cybersecurity engineering experience, including minimum 2 years implementing security controls for cloud-native platforms in Federal or enterprise IT environments.
Alternatively, an Associate's Degree with at least 7 years of cybersecurity engineering experience, including minimum 3 years implementing security controls for cloud-native platforms in Federal or enterprise IT environments.

Technologies

AWS GovCloud
AWS EKS
AWS IAM
AWS Secrets Manager
AWS KMS
HashiCorp Vault
Kubernetes
Kubernetes secrets
SAST
DAST
SCA
Infrastructure as Code scanning
SNOWCAM
TRM
BPE
FIPS 140-3
PIV-based authentication

Benefits

Department of Veterans Affairs (VA) experience
Active Personal Identity Verification (PIV) card
Experience with VA Critical Security Controls and VA Handbook 6500 security requirements
Experience implementing security controls across multi-tenant authorization boundaries
Experience with VA tools and governance processes including SNOWCAM, TRM, and BPE

Compensation

Up to USD 150,000 per year

View full job page →

4d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Washington, DC

Washington, DC

4d ago

$105k - $208k/yr Full time Cloud Cloud Architecture Cloud Computing

Apply Now

Job Description

Deloitte’s Washington, DC based Enterprise Security practice offers a compelling path for professionals who want to shape secure transformations through Zscaler driven zero trust. This onsite role focuses on designing, deploying, and optimizing ZIA and ZPA to secure clients across on premise and cloud environments. The position carries a salary range of USD 105,400 to 207,800 per year and includes a discretionary annual incentive program within a collaborative, client-focused culture that values deep technical expertise and practical problem solving.

Benefits

Discretionary annual incentive program

Responsibilities

Design, deploy, and manage Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise client environments
Support zero trust network access transformations, including replacing legacy VPNs and modernizing access controls
Configure and optimize Zscaler security features such as policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connectors across on premises and cloud environments (AWS, Azure, GCP)
Create technical deliverables, solution designs, and client-facing recommendations aligned to security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent experience
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years hands-on experience designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and ATP/DLP policies in enterprise environments
5+ years hands-on experience designing, deploying, and managing ZPA, including application segment configuration, access policies, connectors, and ZTNA architectures replacing legacy VPNs
1+ years designing, deploying, and managing Zscaler Branch Connector with BGP/static routing and network segmentation, replacing traditional SD-WAN platforms
1+ years designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, GCP) with workload-to-internet and workload-to-workload traffic inspection
3+ years configuring and tuning Cloud Sandboxing, ATP, IPS, CBI, and DLP policies
3+ years implementing and troubleshooting SSL/TLS inspection within ZIA, including certificates, decryption policies, bypass rules, and pinned applications
1+ years working with Zscaler AI capabilities, including AI-driven policy recommendations and ZDX
3+ years defining, managing, and reviewing Zscaler security policies, including rule base optimization and RBAC in the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years with one or more cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors in cloud-native architectures
3+ years deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) for threat detection and incident response
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning and configuration-as-code workflows
Ability to translate Zscaler architectures for executive and non-technical audiences
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM in ZIA and ZPA
Willingness to travel up to 50% on average depending on client engagements
Limited immigration sponsorship may be available

Technologies

Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Branch Connector, Zscaler Cloud Connector
Zscaler AI capabilities, ZDX, SSL/TLS inspection, Cloud Sandboxing, ATP, IPS, CBI, DLP
ZIdentity, AWS, Azure, GCP
SIEM/SOAR: Splunk, Microsoft Sentinel, Palo Alto XSOAR
Terraform, Ansible, Python
Okta, Azure AD, Ping Identity

The Team

Our Enterprise Security offering embeds security across digital transformation initiatives, securing a client’s technical backbone while enabling secure innovation. The team spans security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Preferred Qualifications

Advanced cybersecurity certifications such as CISSP, CCIE Security, CCNP Security, or GIAC equivalents
Ability to conduct SASE vendor competitive analyses and advise on solution selection (eg, Zscaler vs Palo Alto Prisma vs Netskope)
Experience performing Zero Trust Architecture assessments and roadmaps aligned to NIST SP 800-207 or CISA Zero Trust Maturity Model
Previous consulting or Big Four experience with a track record of enterprise network security or SASE transformation engagements

View full job page →

6d ago

Cybersecurity Engineer

Booz Allen Hamilton Arlington, VA

Arlington, VA

6d ago

$62k - $141k/yr Full time Amazon Web Services Aws Govcloud Cloud

Apply Now

Job Description

Booz Allen Hamilton is seeking a Cybersecurity Engineer for an onsite role in Arlington, VA. This position focuses on operating, securing, and monitoring cloud infrastructure in AWS GovCloud, translating DoD requirements to technical teams, and developing cloud-based security architectures for critical systems. The role supports professional growth within a mission-driven environment and offers a comprehensive benefits package.

Benefits

Health benefits
Life insurance
Disability insurance
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program

Responsibilities

Operate, secure, and monitor cloud infrastructure, including system hardening, patching, and vulnerability management
Translate DoD requirements from stakeholders to technical teams and ensure solutions meet the requirements
Develop cloud-based security architectures for some of the most critical systems
Apply the latest cloud technologies to secure customers' environments
Automate security events in the cloud
Implement cloud-based security solutions
Adopt Zero Trust architecture

Requirements

Experience securing cloud infrastructure and applications in AWS GovCloud
Experience with Authority to Operate (ATO) and DoD cloud SRG requirements
Experience with CMMC authorizations
Knowledge of centralized logging, boundary defense, web application firewalls, system patching, RBAC, and vulnerability scanning
Ability to travel up to 25% of the time
Secret clearance
Bachelor’s degree
DoD 8570 IAT Level II or IAT Level III Certification

Technologies

AWS GovCloud
HBSS
ACAS
PowerShell
Bash
Python
Web Application Firewall (WAF)

Compensation

Salary range: USD 62,000 to USD 141,000 per year. Pay is determined by factors including location, education, knowledge, skills, competencies, experience, contract affordability, and organizational requirements. This range represents typical compensation for this role and is one component of Booz Allen's total compensation.

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Secret clearance is required.

Identity verification

As part of the hiring process, Booz Allen uses identity verification that leverages biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. Interview and assessment participation may require being on camera, and Booz Allen may capture images to verify identity.

Candidate AI Usage Policy

AI tools are part of Booz Allen's daily operations, but use of artificial intelligence to assist with interview responses is prohibited unless explicit permission is provided.

Work model

Work will be performed onsite at a Booz Allen office or customer facility, with collaboration required as needed by the role.

Commitment to non-discrimination

All qualified applicants will receive consideration for employment without regard to disability, protected veteran status, or any other status protected by applicable law.

View full job page →

26d ago

Senior Cybersecurity Engineer

One Federal Solution Washington, DC

Washington, DC

26d ago

Full time Senior Azure Azure Cloud

Apply Now

Job Description

The Senior Cybersecurity Engineer will provide technical direction and lead planning and execution across cybersecurity, cloud engineering, agile DevSecOps, AI/ML, and Zero Trust initiatives in federal mission environments. This onsite role is based in Washington, DC, and requires coordinating across contractor and stakeholder teams to translate architectures into actionable plans that meet secure, compliant objectives.

Responsibilities

Provide overall technical direction across cybersecurity task areas.
Lead technical planning and execution involving cybersecurity, cloud engineering, agile DevSecOps, AI/ML, and Zero Trust activities.
Apply Federal, DHS, and IC cybersecurity architectures, standards, and technologies.
Translate cybersecurity architectures, standards, technologies, and emerging practices into technical plans.
Oversee implementation of technical plans across contractor and stakeholder teams.

Requirements

Minimum 10 years of demonstrated cybersecurity engineering experience for projects of similar size and scope.
Knowledge of Federal, DHS, and IC cybersecurity architectures, standards, and technologies.
Knowledge of emerging cybersecurity practices.
Active Top Secret/SCI clearance.
Mandatory certifications in Amazon Web Services (AWS), CISSP, and Scrum practices, all in good standing at award and throughout the period of performance.

Technologies

Amazon Web Services (AWS)
Google
Microsoft Azure
Microsoft Office 365

View full job page →

28d ago

Cybersecurity Engineer

System One Pittsburgh, PA

Pittsburgh, PA

28d ago

Full time Azure Cloud Cloud Operations

Apply Now

Job Description

System One is seeking a Cybersecurity Engineer to strengthen its enterprise security posture and lead threat response efforts on-site in Pittsburgh, PA. The role spans cloud and on-premises environments, with responsibilities that include administering Microsoft 365 security, monitoring threats, and ensuring regulatory compliance across the organization. The selected candidate will implement and maintain security controls while guiding incident response and continuous security improvements.

Responsibilities

Secure enterprise infrastructure, respond to cyber threats, administer Microsoft 365 security, and help ensure regulatory compliance across cloud and on-premises environments.
Implement and maintain enterprise security controls across cloud and on-premises environments.
Manage security compliance and contribute to security policy development.
Monitor and respond to security alerts, incidents, phishing attempts, malware, and suspicious activity.
Conduct vulnerability assessments, track remediation, and perform security hardening.
Manage endpoint protection systems, email security, MFA, Conditional Access, and identity security controls.
Configure and maintain SIEM, logging, and monitoring platforms.
Conduct threat hunting and proactive security reviews.
Administer Microsoft 365 and cloud security tools including Defender, Entra ID (Azure AD), Conditional Access, Intune, Purview, and Exchange Online Protection.
Implement data loss prevention, retention policies, and email security controls.
Secure remote access, mobile devices, and hybrid cloud infrastructure.
Secure firewalls, VPNs, wireless networks, switches, and servers.
Review firewall rules and network segmentation to strengthen security boundaries.
Support backup, disaster recovery, and business continuity initiatives.
Assist with patch management and establishing secure configuration baselines.
Provide escalation support for security-related help desk issues.
Lead response efforts during security incidents and outages.
Conduct user security awareness training and phishing simulations.

Requirements

Must-have domain experience: ideally HUD or similar state or municipal agencies involved in public housing programs; or experience with civilian US federal agencies outside defense/intelligence/national security, or with regulated industries such as insurance, banking, or healthcare.
Experience implementing security controls and solutions from scratch, with working knowledge of security best practices and the ability to plan and execute effectively.
At least 5+ years of hands-on IT security / cybersecurity engineering experience.
Strong experience with Microsoft 365 security technologies.
Experience with firewalls and VPN technologies.
Endpoint Detection & Response (EDR).
Email security platforms.
Vulnerability management tools.
Windows Server and Hybrid Active Directory.
Knowledge of cybersecurity frameworks and compliance standards.

Technologies

Microsoft Defender
Entra ID (Azure AD)
Conditional Access
Intune
Purview
Exchange Online Protection
SIEM
Data Loss Prevention (DLP)
Windows Server
Hybrid Active Directory
Firewalls
VPN technologies
Endpoint Detection & Response (EDR)
Email security platforms
Vulnerability management tools
Microsoft 365 security tools

Benefits

Full benefits

View full job page →

28d ago

Lead Cybersecurity Engineer

Seminole Tribe of Florida Hollywood, FL

Hollywood, FL

28d ago

$109k - $142k/yr Full time Manager Cloud Operations Cloud Platforms

Apply Now

Job Description

Responsibilities

Lead the assessment, integration, and rollout of new information and data security technologies and policies across all infrastructure and enterprise system components.
Provide guidance and mentorship to the tier-2 engineering team to build the skills needed for complex cybersecurity tasks.
Develop information security policies for diverse processes and ensure their successful implementation across the environment.
Coordinate internal and external audits to maintain ongoing compliance with applicable frameworks and regulations.
Create comprehensive plans and strategies for data security, vulnerability management, and log collection.
Administer access management, patch compliance, vulnerability assessments, malware protection, intrusion prevention, security monitoring, and external program compliance.
Provide leadership and oversight for the cybersecurity team, fostering a collaborative and proactive security operations culture.
Contribute to the organization’s cybersecurity posture by protecting sensitive information, mitigating risks, and maintaining regulatory compliance.

Requirements

Bachelor’s degree in information technology or a related field, or equivalent practical experience.
At least five years of experience in an enterprise support environment with information security responsibilities.
Completion of at least two certifications in recognized security certification paths (for example Microsoft, Cisco, or other industry-standard certifications).
Familiarity with regulatory compliance standards including CJIS, COPPA, FERPA, HIPAA, GDPR, and PCI-DSS.
Valid driver’s license.
Strong organizational and interpersonal skills with excellent written and verbal communication abilities.
Willingness to travel to STOF reservations, maintain communication with the Information Security Manager, and work a flexible schedule including evenings, weekends, and holidays.