AWS Security Engineer

AWS Security Engineer

Peraton is seeking an experienced AWS Security Engineer to support secure development, modernization, and migration in support of a government multi-cloud environment with 50+ customer tenants and growing. Aside from technical qualifications, applicant should have effective communication skills, both written and verbal.

The applicant must have engineering experience and extensive AWS and security knowledge and experience with integration, vulnerability remediation, system analysis or programming experience, including developing AWS systems requirements and design specification. The AWS Security Engineer will be responsible for resolving complex incidents, providing expert troubleshooting, and performing proactive monitoring of AWS Infrastructure and services. A passion for performance, strong desire for quality conformance, and attention to detail are prerequisites for this position.

LOCATION: This is a remote position

WORK HOURS: This position requires working online from 8:00am - 5:00pm Eastern Standard Time

Day to Day Roles and Responsibilities:

Security:

• Harden AWS environments and remediate STIG findings in accordance with NIST SP 800-53 and DHS 4300A requirements.
• Maintain and improve the golden image pipeline to ensure compliant baselines

Incident Response and Troubleshooting:

• Serve as an escalation point from Tier 2 support for complex incidents and outages within the AWS GovCloud environment
• Investigate and resolve issues across various AWS services EC2, RDS, S3, VPC, Lambda, and IAM
• Perform root cause analysis to address underlying infrastructure issues and provide solutions to prevent recurrence.
• Manage and resolve high-priority incidents, ensuring timely communication with stakeholders and affected tenants

Monitoring and Optimization:

• Continuously monitor tenant environments using CloudWatch, CloudTrail, and other tools (Dynatrace, Splunk) to detect performance issues, security incidents, and infrastructure bottlenecks
• Utilize Dynatrace, Splunk, or other proactive monitoring tools to mitigate potential issues before they escalate
• Analyze system performance and recommend optimizations to improve stability, efficiency, and security

AWS Infrastructure Management:

• Manage and maintain the AWS infrastructure, including EC2 instances, S3 buckets, VPC configurations, RDS databases, and other services
• Ensure that all tenants' AWS resources are secure, FedRAMP compliant, and optimized for performance
• Collaborate with the Architecture team to implement solutions that align with best practices for AWS cloud infrastructure
• Adhere to Change Management procedures

Collaboration and Knowledge Sharing:

• Collaborate with other team engineers to resolve development issues/incidents and implement improvements
• Document solution designs, process procedures, and lessons learned to enhance team knowledge
• Provide technical mentorship and knowledge sharing to more junior engineers less familiar with pipeline and infrastructure automation

Qualifications

Basic Qualifications:

• Bachelor's degree and 5 years of experience, an Associates degree and 7 years of experience, or a High School diploma or equivalent and 9 years of experience.
• U.S. Citizenship required
• Must have ability to obtain a DHS Public Trust Security Clearance, and/or EOD clearance
• 5+ years of experience in cloud services and infrastructure
• 3+ years of extensive hands-on experience with automation involving a wide range of AWS services including but not limited to EC2 instances, S3 buckets, VPC configurations, RDS databases, and other services
• Proven experience in systems engineering, design, and integration and system administration in Linux or RHEL environments.
• Strong understanding of system life-cycle processes including requirements development, design, implementation, testing, and sustainment.
• Hands-on experience working with cloud platforms (AWS, Azure, or similar).
• Hands-on experience with system verification, validation, and compliance documentation.
• Familiarity with tools and methodologies supporting systems architecture and model-based systems engineering (MBSE).
• Strong analytical, problem-solving, and communication skills.
• Ability to work effectively in cross-functional teams and manage competing priorities in a fast-paced environment.

Preferred Qualifications:

• Preferred certifications: AWS Cloud Practitioner, AWS Certified SysOps Developer, Associate, AWS Certified Developer, Associate, AWS Certified DevOps Engineer, Professional, Relevant Agile Certifications, Red Hat Ansible
• Experience supporting government or defense contracts.
• Extensive knowledge and understanding of AWS GovCloud and deploying in government environments
• Experience with incident management, root cause analysis, and resolving high-priority incidents in large, multi-tenant environments
• Exemplary communication analytical, and technical knowledge across the client environment
• Knowledge of ITIL frameworks or systems engineering certifications (INCOSE, CSEP, or equivalent).
• Familiarity with cloud-based or hybrid systems integration.
• Experience in Agile or DevSecOps environments.
• Experience with PowerShell, AWS CLI, or other automation scripts to troubleshoot and resolve issues

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.