AWS Cloud Security Engineer

Quevera LLC is seeking an AWS Cloud Security Engineer to support security architecture, automation, compliance activities, and security posture management across a complex, multi-vendor AWS environment. This hybrid role supports locations in Herndon, VA; Springfield, VA; Denver, CO; and Seattle, WA, with remote work acceptable based on availability to work from AWS SCIFs as required.

Role Responsibilities

• Design and implement intelligent model-routing logic using ML-based classification to route requests to appropriate LLMs based on conversational context, task complexity, and performance requirements.
• Build and maintain orchestration layers using AWS Bedrock, LangChain, or custom frameworks to support multi-model workflows.
• Train, evaluate, and iterate on classification models using evaluation frameworks and feedback loops.
• Architect conversation-context analysis, retrieval, and embedding strategies to interpret user intent across multi-turn interactions.
• Develop prompt-engineering standards and context-window management techniques supporting intent classification and routing.
• Architect enterprise-scale GenAI solutions with high availability, performance optimization, and cost management.
• Apply GenAI platform practices including observability, model evaluation, guardrails, responsible AI controls, and versioning.
• Design and maintain data extraction and transformation pipelines supporting model training, evaluation, and enterprise application integration.
• Engage with customer stakeholders and technical counterparts to gather requirements, validate solutions, and participate in Agile/Scrum ceremonies.
• Collaborate with the Engagement Manager to track progress and risks and produce technical documentation, architecture diagrams, and handoff artifacts.

Security and Compliance Focus

• Develop reusable Infrastructure as Code (IaC) and cross-account integrations to standardize and centralize security services across a complex, multi-vendor environment with distributed AWS accounts under an externally managed organization.
• Assess current security posture and drive vendor alignment with organizational standards.
• Help shape government security processes and support the production of compliance artifacts, including IATTs and ATOs.
• Integrate distributed logging to a centralized reviewer (C5ISR).

Required Qualifications

• Active TS/SCI clearance required.
• Must be willing and able to work from AWS SCIFs as required.
• Candidates must be local to Herndon, Virginia; Denver, Colorado; or Seattle, Washington.

Technologies

• AWS
• AWS Bedrock
• LangChain
• ML-based classification
• LLMs
• Infrastructure as Code (IaC)
• IATTs
• ATOs
• C5ISR

Work Location and Schedule

• AWS IAD21 – Herndon, Virginia
• Customer Site – Springfield, Virginia
• Denver, Colorado
• Seattle, Washington
• Work split: approximately 80% low-side / 20% high-side.
• Remote work is acceptable, with attendance at AWS SCIFs as required.

Benefits

• 100% employer-paid medical coverage (optional plan)
• Competitive options for Medical, Dental and Vision insurance
• Employer-paid short-term and long-term disability coverage
• Employer-paid life insurance
• $5,000 annually for education, training, certifications, and professional development
• Career advancement through the structured iQTouch Program
• Up to 6% 401(k) match
• Additional 4% profit-sharing contribution, at company discretion

Equal Opportunity Statement

Quevera is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age or any other characteristic protected by law. #LI-AA1