AWS Cloud Security Engineer

AWS Cloud Security Engineer

Candidates must be U.S. citizens able to obtain and/or maintain a Department of Defense security clearance as a condition and continuation of employment.

Location: Stafford, Virginia (Hybrid)

Role Overview

We are seeking an AWS Cloud Security Engineer to support a mission-critical program for a federal government agency. This role involves designing, implementing, and maintaining a secure AWS cloud infrastructure for application development and operations. You will serve on the Security & Infrastructure team, responsible for AWS cloud environments spanning development, test, pre-production, and production.

Key Responsibilities

• Design, build, and maintain AWS infrastructure, including EC2, IAM, VPC networking, security groups, and AMI lifecycle management.
• Provision and manage infrastructure as code using CloudFormation.
• Implement and validate security settings and hardening across cloud infrastructure, operating system baselines, and application platforms.
• Provide AWS network and security support, including subnet design, security group configuration, and encryption management.
• Design and maintain least-privilege IAM roles and policies, and remediate findings from security tools like IAM Access Analyzer, Security Hub, and GuardDuty.
• Implement NIST SP 800-53 security controls within the cloud environment and contribute technical content to authorization packages.
• Support security assessments by producing evidence, responding to questions, and driving remediation activities.
• Collaborate with development and infrastructure teams to ensure stable, current, and available environments.
• Participate in Agile ceremonies, refine stories, and provide estimates for infrastructure and security work.
• Troubleshoot environment and pipeline issues, documenting the root cause and resolution.

Required Qualifications

Experience: A minimum of 3 years of hands-on experience in AWS cloud engineering, including administering EC2, IAM, VPC, and AMIs. Experience supporting federal security compliance efforts, including NIST 800-53, the Risk Management Framework (RMF), and contributing to security documentation for an accredited system.

Technical Skills: Demonstrated experience with security settings implementation and system hardening. Proficiency in a scripting language such as PowerShell or Bash. Experience using or managing Git-based version control.

Certifications: A current Security+ certification or the ability to obtain one within 6 months of starting.

Preferred Qualifications

• Experience working with Kubernetes and container images.
• Experience with federal cloud security environments supporting mission-critical applications.
• System Administration experience.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.