Lead AWS Cloud Security Remediation Engineer - CSPM / CrowdStrike / AWS Security

Lead AWS Cloud Security Remediation Engineer (AWS Platform / CSPM Remediation)





Location: Remote with onsite interview in Reston, VA
Pay: $109/hour (W2)
Type: Contract | Schedule: 40 hours/week



Overview

We’re looking for a senior, hands-on AWS platform engineer to help remediate cloud security misconfigurations and attack indicators surfaced by a CSPM tool (CrowdStrike). This role is deeply technical and focused on building, hardening, troubleshooting, and improving AWS environments that support production workloads and ongoing migration efforts (on?prem to AWS/EKS).
“Lead” refers to senior depth/experience—this is not people management.



Work setup / interview

• Contract: 6 months (with potential extension based on project need)
• Location: Client is in Reston, VA. Onsite interview required, role is remote.

• Remediate AWS security vulnerabilities/misconfigurations across:
  • IAM, networking exposure, encryption/logging, patching, config drift, and container/EKS security
• Translate CSPM findings into actionable remediation plans and durable fixes
• Provision and harden AWS resources; implement repeatable guardrails and automation to prevent recurrence
• Troubleshoot production issues end-to-end with app teams and platform/security stakeholders
• Perform root-cause analysis (RCA) using logs/telemetry and implement corrective actions
• Support cloud migration/modernization efforts (on?prem workloads moving into AWS/EKS; migration is well underway)

• 10+ years overall IT experience (senior/lead level)
• 5+ years hands-on AWS platform engineering ( AWS experience must be within the most recent 5 years )
• Strong production support and troubleshooting experience (not “pipeline-only DevOps”)
• Proven ability to perform RCA and partner with application teams to isolate issues (knowing where/what to check in logs)
• Terraform (at least 1+ year hands-on)
• Strong AWS fundamentals, including:
  • EC2 , IAM, Security Groups, S3, VPC/networking concepts
• Networking troubleshooting skills (identify bottlenecks from a platform engineering standpoint)
• Linux administration (hands-on)
• At least one AWS certification (Security / Solutions Architect / SysOps / DevOps preferred)

• EKS / Kubernetes (some openings are EKS-heavy)
• Python automation (Lambda/Boto3 helpful for remediation workflows)
• CloudFormation and/or CDK
• AWS security services experience (in a remediation context): Security Hub, GuardDuty, Inspector, Config, CloudTrail/CloudWatch, KMS, Secrets Manager, WAF
• SRE / production engineering background (incident response, resiliency, operational readiness)
• Database experience
• Exposure to AI workloads (for some openings)

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.



System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.




#M-1
#LI-
Ref: #851-Rockville-S1