Cloud Security Engineer (AWS)

Job Family:

IT Cyber Security

Travel Required:

Up to 10%

Clearance Required:

Ability to Obtain Public Trust

What You Will Do:

• We are seeking an experienced AWS Security engineer to design, implement and maintain security controls across AWS cloud environments.
• This role will focus on safeguarding cloud workloads, ensuring compliance with industry standards, and driving leading/best practices in identity management, monitoring, and threat detection.
• The ideal candidate is hands-on with AWS security services, has deep knowledge of cloud security frameworks, and can partner with engineering and operations teams to embed security into the system.
• Design and implement secure architecture within AWS using services such as IAM, KMS, CloudTrail, Config, and third-party tools/services
• Implement and manage centralized logging, monitoring, audit monitoring, incident triage and alerting solutions. Conduct threat modeling, vulnerability scanning, and penetration testing.
• Compare the system environment with applicable security requirements (CIS Benchmarks, NIST, HIPAA, FedRAMP, SOC 2 etc.) as applicable and chart a path towards compliance.
• Support incident detection, investigation and response within AWS workloads. Maintain and monitor audit trails across accounts and services. Work with compliance and risk teams to align security with regulatory requirements.
• Maintain security control documentation
• Support Disaster Recovery/Continuity of Operations (DR/COOP) tests
• Support audits and other compliance related requests

What You Will Need:

• US Citizenship is required.
• Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse. Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY are preferred.
• Bachelor’s degree from an accredited university.
• Minimum of TWO (2)+ years of relevant work experience.
• Experience in cloud security or cybersecurity roles focused on AWS security.
• Expertise in AWS core services (EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53, IAM, etc.)
• Knowledge of CI/CD pipelines, GitHub Actions audit, CodeBuild job review, artifact migration, secrets verification, deployment dry runs, rollback prep, cutover support.
• Knowledge of tax-processing, tax compliance, case management, and taxpayer data are highly preferred.
• Experience in organizing, directing, and managing multiple, complex, and interrelated application development and testing tasks.
• Experienced in the following:
  • Monitoring AWS/Databricks telemetry by leveraging AWS tools (GuardDuty) or third party monitoring tools selected by client
  • Managing access, including granting and removing, supporting integration with an IGA solution, identifying stale accounts
  • Rotating keys/certificates by leveraging KMS (AWS tool)
  • Enforce encryption for data in transit/at rest
  • Generating or supporting the generation of information for access entitlement
  • Track and remediate vulnerabilities/ Plan of Action and Milestones (POA&Ms) 
• The individuals should be responsible for technical quality and coordination with government technical leads throughout information technology (IT) and shall be available during normal hours of operation.
• Proven ability to work autonomously and collaborate, mentor, help, and support other team members, as needed to solve complex operational and reliability problems.
• Strong development background in Python, Bash or similar

What Would Be Nice To Have:

• AWS Certified Security – Specialty (Highly desirable).
• Advanced Cloud and/or advanced Databricks certifications in good standing, at the time of contract award and throughout the period of performance is highly preferred.
• AWS Certified Solutions Architect or DevOps Engineer certifications.
• CISSP, CISM or GIAC certifications.

The annual salary range for this position is $74,000.00-$124,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizat