AWS Cloud Security Engineer

Salary: $110,000 - 120,000 per year Requirements:

• We require an active Secret clearance.
• We require a minimum of 3 years of experience.
• We need hands-on AWS administration experience with EC2, IAM, VPC, and AMI lifecycle management.
• We need practical experience applying security settings and hardening across cloud and operating system layers.
• We need working knowledge of NIST SP 800-53 controls and the RMF or ATO process, including supporting security documentation, assessment evidence, or POA&M remediation on an accredited system.
• We need experience working with Kubernetes and container images.
• We need experience using or managing Git-based version control across multiple projects.
• We require a current Security+ certification, or the ability to obtain it within 6 months.
• We need system administration experience.
• We need strong attention to detail and solid troubleshooting skills.
• We need proficiency in scripting languages, preferably PowerShell or bash.
• We need experience implementing security settings.
• Desired: experience in Agile SDLC.
• Desired: familiarity with FedRAMP, AWS GovCloud, or CJIS Security Policy requirements.
• Desired: experience with Infrastructure as Code tools such as Terraform and CloudFormation.
• Desired: previous experience in a software development environment.
• Desired: knowledge of security monitoring and scanning tools.
• Desired: Linux experience.

• We work on the Security & Infrastructure team supporting cloud-based development in AWS.
• We design, build, and maintain AWS infrastructure for CODIS development, test, pre-production, and production environments, including EC2, IAM, VPC networking, security groups, and AMI lifecycle management.
• We provision and manage infrastructure as code using CloudFormation.
• We partner with the CODIS development and infrastructure teams to keep Dev and Test environments stable, current, and available to sprint teams.
• We may provide occasional off-hours support for system upgrades, patches, and maintenance.
• We implement and verify security settings across cloud infrastructure, operating system baselines, and application platforms.
• We provide AWS network and security support, including subnet and routing design, security group and NACL configuration, encryption in transit and at rest, KMS key management, and enterprise certificate and TLS trust management.
• We design and maintain least-privilege IAM roles and policies, and remediate findings from IAM Access Analyzer, Security Hub, GuardDuty, and Config.
• We implement NIST SP 800-53 security controls in the cloud environment and document how each control is satisfied within the NIST Risk Management Framework.
• We contribute technical content to ATO packages, including SSP narratives, control implementation statements, diagrams, and inventory artifacts.
• We support security assessments by producing evidence, answering assessor questions, and driving POA&M items to closure.
• We participate in Agile ceremonies, refine infrastructure and security stories, and provide realistic sprint estimates.
• We troubleshoot environment and pipeline issues, and document root cause and resolution so fixes are repeatable.

• AWS
• Bash
• Cloud
• EC2
• Git
• IAM
• Support
• Kubernetes
• Linux
• Network
• PowerShell
• REST
• Security
• Terraform

More:

VTG is seeking an AWS Cloud Security Engineer for a hybrid role supporting a program in Stafford, Virginia, with only two days per month onsite. This is a full-time position paying $110,000 to $120,000 per year. The role includes benefits such as 401(k), 401(k) matching, dental, health, life, paid time off, and vision insurance. We are an equal opportunity employer and consider all qualified applicants without regard to disability, protected veteran status, or other protected characteristics. The work location is hybrid remote in Stafford, VA 22554.

last updated 36 week of 2026