Cloud Security Engineer (Secret Clearance)
Job Description
The Cloud Security Engineer role focuses on assessing, designing, implementing, and monitoring cloud security controls across AWS, GCP, and Azure to support secure architecture and risk reduction. This onsite position is based in Washington, DC, with a salary range of USD 107,925 - 188,000 per year and requires a minimum of two years of relevant experience.
Responsibilities
- Evaluate cloud environments across AWS, GCP, and Azure to identify security risks, control gaps, and misconfigurations.
- Design, implement, and enhance cloud security controls, including identity and access management, network security, encryption, logging, and continuous monitoring.
- Support cloud security architecture reviews for new and existing solutions and provide recommendations aligned to security and compliance requirements.
- Investigate cloud security events, perform root-cause analysis, and assist remediation activities with engineering and operations teams.
- Develop and maintain technical documentation, standards, baselines, and reports related to cloud security controls and cloud risk management.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a similar technical field
- Active Secret Clearance
- Local to the DMV area and able to work onsite up to five days a week
- Ability to travel approximately 20% on average based on client work
- 2+ years of experience in the following areas:
- Supporting cloud security, cloud engineering, or cloud infrastructure
- Experience implementing or assessing security controls in AWS, GCP, and Azure
- Experience with cloud identity and access management, network security, encryption, logging, monitoring, and configuration management
- Experience using cloud-native security tools, security posture management tools, or infrastructure as code tools
- Legally authorized to work in the United States without the need for employer sponsorship now or in the future
Technologies
- Amazon Web Services (AWS)
- Google Cloud Platform (GCP)
- Microsoft Azure
- Terraform
- Python
- PowerShell
- Bash
- Kubernetes
Benefits
- Discretionary annual incentive program
Preferred
- Experience supporting cloud security architecture reviews, cloud migrations, or cloud transformation programs
- Experience with security frameworks and benchmarks such as NIST, CIS, or ISO
- Experience with scripting or automation using Python, PowerShell, Bash, or Terraform
- Experience with container security, Kubernetes, or DevSecOps practices
- Industry certifications such as AWS Certified Security - Specialty, Microsoft Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or CISSP