AWS Cloud Security Consultant

AWS Cloud Security Consultant

Location: Washington, DC Metro Area (Onsite)

POSITION OVERVIEW

We are seeking an experienced AWS Cloud Security Consultant to support a federal environment by strengthening cloud security, ensuring regulatory compliance, and providing technical guidance to engineering teams.

KEY RESPONSIBILITIES

• Conduct security assessments of AWS cloud infrastructure and environments.
• Review Infrastructure-as-Code (IaC) deployments for security compliance.
• Validate adherence to security policies, standards, and federal requirements.
• Assess AWS environments against the AWS Well-Architected Security Pillar.
• Identify and document vulnerabilities, misconfigurations, and control gaps.
• Develop security dashboards, standards, and playbooks.
• Provide technical consultation to engineering teams.
• Implement and improve AWS-native security controls.
• Conduct security training and awareness sessions.
• Present findings, recommendations, and risk assessments to stakeholders.
• Automate security reviews and continuous monitoring processes.
• Recommend security tooling and process enhancements.

REQUIRED QUALIFICATIONS

• 7 to 10+ years of hands-on AWS security experience.
• Experience securing scalable AWS cloud environments.
• Knowledge of NIST Cybersecurity Framework, NIST SP 800-53, and OMB M-22-09.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience providing security consulting and advisory services.
• Expertise in IAM, Cloud Security, Network Security, Zero Trust, DevSecOps, DLP, and Vulnerability Management.
• Experience with scripting, automation, and Infrastructure-as-Code.
• Self-motivated with the ability to work independently.
• Strong attention to detail and documentation skills.

CERTIFICATIONS

• AWS Certified Security Specialty (Strongly Preferred)
• AWS Certified Solutions Architect Professional
• AWS Certified Solutions Architect Associate

SUCCESS FACTORS

• Proactively identify and mitigate cloud security risks.
• Collaborate effectively across engineering and leadership teams.
• Drive continuous security improvement and compliance.
• Balance security objectives with operational requirements.