AWS Cloud Security Engineer

🔥 26 minutes ago

🇺🇸 United States – Remote

💵 $104k - $166k / year

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Peraton

WebsiteLinkedInAll Job Openings

10,000+ employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Peraton is a mission-focused enterprise that supports national security initiatives through advanced IT and cyber services. They provide capabilities in areas such as cyber defense, cloud operations, engineering, and intelligence. With a commitment to solving complex challenges, Peraton integrates data-driven technologies to ensure mission success for their military and government clients.

📋 Description

• Design and implement security architecture for AWS workloads aligned with FedRAMP Moderate baseline controls • Build and maintain security guardrails using AWS-native services • Implement and manage Infrastructure as Code security controls with policy as code • Support System Security Plans, ATO activities, and POA&M remediation • Perform continuous monitoring, vulnerability scanning, patch management tracking, and monthly/annual assessment support • Configure and maintain centralized logging, SIEM integration, and audit trail retention per FedRAMP/NIST requirements • Implement least-privilege IAM policies, service control policies, and cross-account access controls • Manage encryption at rest and in transit per FIPS 140-2/140-3 requirements where applicable • Respond to security incidents, perform root cause analysis, and support cloud-specific incident response playbooks • Collaborate with DevOps/Platform teams to embed security into CI/CD pipelines • Maintain documentation for control implementation statements, architecture diagrams, and audit evidence • Support boundary definition and system categorization activities as required

🎯 Requirements

• US citizenship required • Ability to obtain and maintain a Top-Secret eligible clearance • Minimum 8 years work experience with BS/BA in computer science, or 10 years work experience with an AA/AS degree in Information Systems, or a related field (or equivalent experience) • 5+ years of hands-on AWS engineering experience, with 3+ years specifically in cloud security roles • Demonstrated experience working within a FedRAMP Moderate or FedRAMP High, DoD IL4/IL5, or equivalent federal compliance environment • Experience supporting or maintaining an SSP and RMF processes • Experience with AWS GovCloud (US), AWS Commercial, or equivalent federal AWS environments • Strong hands-on expertise with AWS security services: IAM, GuardDuty, Security Hub, AWS Config, CloudTrail, KMS, WAF, Macie, Inspector, and Systems Manager • Solid understanding of NIST SP 800-53 Rev 5 control families (AC, AU, CM, IA, SC, SI, etc.) and the ability to map implementations to specific controls • 3+ years of experience with Infrastructure as Code (Terraform and/or CloudFormation), including security scanning and policy-as-code tools • Networking security fundamentals: VPC design, security groups, NACLs, PrivateLink, Transit Gateway, and network segmentation for compliance boundaries • Experience with vulnerability management tools (AWS Inspector or similar) and remediation tracking • Experience implementing Zero Trust Architecture (ZTA) in AWS • Familiarity with SIEM/log aggregation tools (Splunk, AWS CloudWatch, OpenSearch, or similar) for security event monitoring • Scripting ability in Python or Bash for automating compliance checks and remediation • Understanding of encryption standards relevant to federal systems (FIPS 140-2/140-3, TLS 1.2+) • One of the following certifications: AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional (with a security focus), CISSP, CISM, or Security+ (with strong AWS hands-on experience) • Preferred: Direct experience supporting a Peraton program or similar federal integrator • Preferred: Familiarity with server and systems hardening software • Preferred: Experience with container security (ECS/EKS), including image scanning (ECR scanning) and runtime protection • Preferred: Experience with AWS Control Tower and multi-account landing zone security governance • Preferred: Experience automating compliance evidence collection for continuous ATO (cATO) • Preferred: Prior experience with change management processes in a regulated/audited environment • Preferred: Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field • Preferred: Active security clearance • Preferred: Experience with AWS AI services (Amazon Bedrock) • Preferred: Experience with hybrid/multi-cloud architecture, including Azure • Preferred: Experience with Microsoft .NET • Preferred: Experience supporting ATO/continuous monitoring processes • Preferred: Familiarity with DevSecOps pipelines • Preferred: Familiarity with AI security and governance frameworks, national security/defense/critical infrastructure missions, and supporting federal agencies or large GovCon programs

🏖️ Benefits

• Potential eligibility for overtime • Potential eligibility for shift differential • Potential eligibility for a discretionary bonus