AWS Cloud Security Engineer

🕒 Yesterday

🇺🇸 United States – Remote

💵 $104k - $166k / year

⏰ Full Time

🟠 Senior

🔴 Lead

☁️ Cloud Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Peraton

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Peraton is a mission-focused enterprise that supports national security initiatives through advanced IT and cyber services. They provide capabilities in areas such as cyber defense, cloud operations, engineering, and intelligence. With a commitment to solving complex challenges, Peraton integrates data-driven technologies to ensure mission success for their military and government clients.

📋 Description

• Design and implement security architecture for AWS workloads aligned with FedRAMP Moderate baseline controls • Build and maintain security guardrails using AWS-native services (IAM, GuardDuty, Security Hub, Config, CloudTrail, KMS, WAF, Macie, Inspector) • Implement and manage Infrastructure as Code security controls (Terraform/CloudFormation) with policy as code • Support System Security Plans (SSPs), ATO activities, and POA&M remediation • Perform continuous monitoring, vulnerability scanning, patch management tracking, and monthly/annual assessment support • Configure and maintain centralized logging, SIEM integration, and audit trail retention per FedRAMP/NIST requirements • Implement least-privilege IAM policies, service control policies (SCPs), and cross-account access controls. • Manage encryption at rest and in transit (KMS, ACM, TLS enforcement) per FIPS 140-2/140-3 requirements where applicable • Respond to security incidents, perform root cause analysis, and support cloud-specific incident response playbooks • Collaborate with DevOps/Platform teams to embed security into CI/CD pipelines (DevSecOps) • Maintain documentation for control implementation statements, architecture diagrams, and audit evidence • Support boundary definition and system categorization activities (FIPS 199) as required

🎯 Requirements

• US citizenship required; ability to obtain and maintain a Top-Secret eligible clearance • Minimum 8 years work experience with BS/BA in computer science, Information Systems, or a related field (or equivalent experience) • 5+ years of hands-on AWS engineering experience, with 3+ years specifically in cloud security roles • Demonstrated experience working within a FedRAMP Moderate or FedRAMP High, DoD IL4/IL5, or equivalent federal compliance environment • Experience supporting or maintaining an SSP and RMF processes • Experience with AWS GovCloud (US), AWS Commercial, or equivalent federal AWS environments • Strong hands-on expertise with AWS security services: IAM, GuardDuty, Security Hub, AWS Config, CloudTrail, KMS, WAF, Macie, Inspector, and Systems Manager • Solid understanding of NIST SP 800-53 Rev 5 control families (AC, AU, CM, IA, SC, SI, etc.) and the ability to map implementations to specific controls • 3+ years of experience with Infrastructure as Code (Terraform and/or CloudFormation), including security scanning and policy-as-code tools • Networking security fundamentals: VPC design, security groups, NACLs, PrivateLink, Transit Gateway, and network segmentation for compliance boundaries • Experience with vulnerability management tools (AWS Inspector or similar) and remediation tracking • Experience implementing Zero Trust Architecture (ZTA) in AWS • Familiarity with SIEM/log aggregation tools (Splunk, AWS CloudWatch, OpenSearch, or similar) for security event monitoring • Scripting ability in Python or Bash for automating compliance checks and remediation • Understanding of encryption standards relevant to federal systems (FIPS 140-2/140-3, TLS 1.2+) • One of the following certifications: AWS Certified Security – Specialty, or AWS Certified Solutions Architect – Professional (with a security focus), or CISSP, CISM, or Security+ (with strong AWS hands-on experience).

🏖️ Benefits

• EEO: • Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.