AWS Cloud Security & Guardrails Engineer

Responsibilities

• Design and improve AWS IAM policies, encryption controls, and centralized logging patterns.
• Review cloud architectures and infrastructure code for security risks.
• Support security assessment documentation and evidence collection.
• Partner with engineering teams to embed reusable security guardrails in deployment workflows.

Requirements

• At least 5 years of engineering experience, including at least 3 years of hands-on AWS experience.
• Strong knowledge of AWS IAM, KMS, logging, and cloud security architecture.
• Experience reviewing technical implementations against security requirements.
• Experience working in highly controlled environments.
• Active TS/SCI clearance and eligibility for applicable SCI read-on/indoctrination and additional program-specific access approvals.
• Residence within commuting distance of Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
• U.S. citizenship is required pursuant to a government contract.
• Preferred qualifications include automated policy validation or infrastructure-as-code security experience, formal security authorization experience, and relevant AWS professional or specialty certifications, Security+, or CISSP where applicable.

Benefits

• Full-time, on-site position with regular work at an approved secure facility and occasional work at authorized customer facilities; this is not a remote position.
• Ongoing learning and professional development opportunities.
• Health benefits, retirement benefits, and flexible work arrangements for eligible employees.
• Virtue-centered team environment with regular performance appraisals and career advancement opportunities.