A federal program team building secure AWS platforms is adding a security engineer who can help set the security design from day one. The work centers on turning security requirements into usable identity, encryption, and observability guardrails that development teams can build on without second-guessing.
Numbers & Facts
Location
Herndon, VA
Salary
$165,000–$220,000 Per Year
Description
AWS Cloud Security Guardrails Engineer (TS/SCI) Location: Herndon, VA or Washington, DC (on-site) Clearance: Active TS/SCI Type: Full-time Overview
A federal program team building secure AWS platforms is adding a security engineer who can help set the security design from day one. The work centers on turning security requirements into usable identity, encryption, and observability guardrails that development teams can build on without second-guessing. What You Will Do
Build reusable security guardrails into deployment pipelines in partnership with engineering teams.
Assess cloud architectures and infrastructure code for security gaps.
Create and refine AWS IAM policies, KMS encryption controls, and centralized logging designs.
Help assemble evidence and documentation for security assessments.
What You Bring
5 or more years of engineering experience, at least 3 of them hands-on in AWS.
Deep working knowledge of AWS IAM, KMS, logging, and cloud security architecture.
A track record of checking technical builds against defined security requirements.
Ability to work well in a closely controlled operating environment.
Nice to Have
Security for infrastructure as code, or automated policy validation.
Hands-on support of formal security authorization efforts.
AWS Professional or Specialty certification. Security+ or CISSP is a plus.
Additional Requirements
Current, active TS/SCI. You must also qualify for SCI indoctrination and any program-level access approvals the customer requires.
U.S. citizenship is required under the terms of the government contract.
You must live within a reasonable daily commute of the secure site in Herndon, VA or Washington, DC.
Full-time and fully on-site in an accredited secure facility, with occasional visits to approved customer sites. Remote work is not an option.