AWS Cloud Cyber Security Engineer

Salary: $175,000 - 200,000 per year Requirements:

• Current U.S. Government Top Secret clearance with SCI eligibility
• At least 8 years of directly related experience, including 8 years in AWS cloud and cybersecurity
• Bachelor of Science degree in a STEM field
• DoD 8570 IAT or IAM certification; an IAT or IAM certification is preferred
• Experience in one or more roles such as SysAdmin, ISSM, ISSO, ISSE, SCA, or ISO
• Experience supporting the Intelligence Community or DoD in cybersecurity
• Previous Systems Engineering and Technical Assistance (SETA) experience
• Strong verbal and nonverbal communication skills
• Proficiency with office automation tools, including Microsoft Office, Project, and Visio
• Ability to work independently with limited direction and supervision
• Preferred experience supporting Space customers, such as Space Force or NRO
• Preferred experience briefing senior customer personnel
• Ability to organize and prioritize multiple customer requests in a fast-paced, deadline-driven environment

• Support our customer in cybersecurity and lead end-to-end RMF Assessment and Authorization processes for mission-critical applications, securing and maintaining ATO across DoD IL-5 and IL-6 AWS environments
• Author and maintain security documentation in eMASS, including SSPs, SARs, POA&Ms, and PPSM documentation
• Map cloud controls to NIST SP 800-53 Rev. 5, CNSSI 1253, and DoD Cloud Computing SRG requirements, turning AWS configurations into audit-ready evidence
• Manage POA&Ms and coordinate vulnerability remediation with engineering teams to reduce risk and address compliance findings ahead of assessments
• Assess AWS cloud security using tools such as Security Hub, GuardDuty, IAM Access Analyzer, Tenable Nessus, Prisma Cloud, Inspector, and AWS Config
• Design and audit IAM architectures, applying least-privilege access, MFA, and secure cross-account role assumption across classified SIPRNet and unclassified NIPRNet environments
• Integrate IaC security scanning tools such as Checkov, Tfsec, or KICS into DevSecOps CI/CD pipelines, automating detection and remediation of security drift in Terraform templates
• Verify encryption in transit and at rest, including FIPS 140-3 cryptographic modules, AWS KMS key policies, and TLS 1.3 for boundary-crossing data transfers
• Assess and secure hybrid-cloud boundaries, including CAPs, VPCs, Security Groups, Network ACLs, and AWS Transit Gateway routing, to prevent unauthorized data exfiltration
• Maintain configuration baselines for AWS services such as EC2, S3, RDS, EKS, and Lambda in alignment with DISA STIGs and SRG baselines
• Support incident response and continuous monitoring by configuring and analyzing centralized logs from CloudTrail, VPC Flow Logs, CloudWatch, and Security Lake integrated with enterprise SIEM platforms such as Splunk
• Work with SCA and AO teams and lead technical cloud architecture walkthroughs to advance the RMF assessment process

• AWS
• Lambda
• CI/CD
• Cloud
• CloudWatch
• DevSecOps
• EC2
• Flow
• IAM
• Support
• Network
• Prisma
• REST
• Security
• Splunk
• Terraform

More:

We offer an SDA AFC2 SME role supporting a customers cybersecurity needs. The position is in person and pays $175,000–$200,000 per year. Benefits include a 401(k) with matching, dental, health, vision, and life insurance, an employee assistance program, paid time off, parental leave, professional development assistance, a referral program, and tuition reimbursement.

last updated 40 week of 2026