Cloud Security Engineer

At BWX Technologies, Inc. (NYSE: BWXT), we are People Strong, Innovation Driven. A U.S.-based company, BWXT is a Fortune 1000 and Defense News Top 100 manufacturing and engineering innovator that provides safe and effective nuclear solutions for global security, clean energy, environmental restoration, nuclear medicine and space exploration. With more than 7,800 employees, BWXT has 14 major operating sites in the U.S., Canada and the U.K. We are the sole manufacturer of naval nuclear reactors for U.S. submarines and aircraft carriers. Our company supplies precision manufactured components, services and fuel for the commercial nuclear power industry across four continents. Our joint ventures provide environmental restoration and operations management at a dozen U.S. Department of Energy and NASA facilities. BWXT’s technology is driving advances in medical radioisotope production in North America and microreactors for various defense and space applications. For more information, visit Follow us on LinkedIn ( , X ( , Facebook ( and Instagram ( .

Welcome to BWXT

We believe in empowering our employees and cultivating a dynamic workplace that fosters growth and collaboration. Whether you’re an experienced professional or just starting your career, you'll find opportunities to challenge yourself, learn from seasoned experts, and contribute to nuclear innovation. We require a diverse range of skills to support our work in the markets that drive our business and welcome candidates from all backgrounds and life stages who are passionate about making a difference.

Position Overview:

We are looking for a Cloud Security Engineer to enhance our cloud security posture across various platforms, including Azure and enterprise SaaS solutions. This role requires expertise in implementing security controls, evaluating risks, and ensuring compliance with data protection regulations. The ideal candidate will have a strong understanding of secure cloud architectures and a passion for staying current with emerging trends in cloud security. You will collaborate with cross-functional teams to promote secure development practices and contribute to the continuous improvement of our security capabilities, ensuring the protection of our cloud environments and data assets.

Location:

Hybrid weekly work schedule in Lynchburg, Virginia

Your Day to Day as a Cloud Security Engineer:

• Implement and audit cloud security controls to protect workloads across Azure and other IaaS/PaaS environments.

• Evaluate and secure SaaS and application platforms including Microsoft 365, enterprise SaaS solutions, containerized workloads, and DevOps pipelines.

• Support data protection and governance initiatives through configuration and operational use of Microsoft Purview (eDiscovery, Insider Risk, DLP).

• Conduct security reviews and risk assessments for cloud services, applications, and third-party integrations prior to deployment.

• Collaborate with architecture and development teams to embed secure-by-design practices into cloud architectures and processes.

• Monitor and assess cloud security posture using native and enterprise tools to identify misconfigurations, vulnerabilities, and improvement opportunities.

• Support supply chain and third-party risk management by evaluating vendor security practices and integration risks.

• Contribute to continuous improvement efforts by identifying process gaps, recommending enhancements, and helping mature cloud and on-premises security capabilities.

• Develop and maintain technical documentation for cyber security configurations, standards, and operational procedures.

• Stay current with emerging cloud security trends, technologies, and best practices relevant to enterprise environments.

Required Minimum Qualifications:

• Bachelor’s degree in Cybersecurity, IT, or related field. Equivalent experience may be considered.

• At least 5 years of relevant experience.

• Hands-on experience securing cloud environments across Azure, AWS, or GCP, including identity, networking, storage, and workload protections.

• Experience with application and SaaS security including Microsoft 365, enterprise SaaS platforms, and containerized applications.

• Proficiency with Windows and Linux environments and their security hardening practices.

• Familiarity with data protection and governance tools such as Microsoft Purview (DLP, Insider Risk, eDiscovery).

• Understanding of DevOps and CI/CD security practices including code scanning, pipeline security, and secrets management.

• Knowledge of cloud security frameworks such as CIS Benchmarks, NIST CSF, or equivalent industry standards.

• Demonstrate a strong commitment to confidentiality in handling sensitive information.

• Strong communication and documentation skills with the ability to translate technical concepts for diverse audiences.

• Ability to work collaboratively across teams and contribute to a positive, security-focused culture.

• U.S. citizenship.

• Ability to obtain and maintain a Department of Energy (DOE) security clearance.

Preferred Additional Qualifications:

• Experience supporting third-party and supply chain risk assessments for cloud and SaaS vendors.

• One or more of the following certifications: AWS-SCS, AZ-500, GCP-PCSE, CISSP, CCSP, GCLD, Cloud+, or equivalent.

What We Offer:

• Competitive salary and benefits package, including health, dental, and retirement plans.

• Flexible work schedules and paid time off to promote a healthy work-life balance.

• Professional development opportunities, including mentorship programs and sponsorship for continuing education.

• An inclusive atmosphere that celebrates new perspectives and supports collaboration between different generations.

• The chance to be part of a mission-driven organization making a positive impact on the future of energy.

• Opportunities for continuous learning and training to grow throughout your career!

#LI-DA1

Pay: $[[cust_salaryMin]] - $[[cust_salaryMax]]

The base salary range for this position in [[stateProvince]] at the start of employment is expected to be between $[[cust_salaryMin]] and $[[cust_salaryMax]] per year. However, the base salary offered is based on local job market factors, and may vary further depending on factors specific to the selected job candidate, such as job-related knowledge, skills, experience, and other objective business considerations. Subject to these considerations, the total compensation package for this position may also include other elements, such as an annual cash incentive in addition to a full range of medical, retirement, and/or other benefits. Details of participation in these benefit plans will be provided at such time the selected job candidate receives an offer of employment. If hired, the selected job candidate will be employed 'at-will,’ unless employed at a location and in a position subject to a collective bargaining agreement. The company further reserves the right to modify base salary (as well as any other discretionary payment, compensation or benefit program) at any time, including for reasons related to individual performance, company or individual department/team performance, and other market factors.

As a federal government contractor, BWX Technologies, Inc. and any subsidiaries, affiliates and related entities (“BWXT” or the “Company”) complies with all federal, state, and local laws and customer requirements regarding health and safety protocols. As such, all BWXT new hires will be required to adhere to applicable Company health and safety requirements within the workplace as a condition of employment.

All candidates must be U.S. citizens. Selected applicants are required to successfully complete a pre-employment check and drug screening. In addition, the position may require the ability to obtain and maintain applicable federal eligibility requirements for access to classified/sensitive information or matter which involves an extensive criminal and financial background investigation, drug test, previous employment, and reference verifications.

BWXT is committed to the concept of Equal Employment Opportunity. We have established procedures to ensure that all personnel actions such as recruitment, compensation, career development, benefits, company-sponsored training and social recreational programs are administered without regard to race, color, religion, sex, national origin, citizenship, age, disability, protected veteran or other protected status.

BWX Technologies, Inc. and its affiliates and subsidiaries (BWXT) is not responsible for and does not accept any liability for fees or other costs associated with resumes or candidates presented by recruiters or employment agencies, unless a binding, written recruitment agreement between BWXT and the recruiter or agency exists prior to the presentation of candidates or resumes to BWXT and includes the specific services, job openings, and fees to be paid (“Agreement”). BWXT may consider any candidate for whom a recruiter or agency has submitted an unsolicited resume and explicitly reserves the right to hire such candidate(s) without any financial obligation to the recruiter or agency unless an Agreement is in place prior to presentation and such Agreement explicitly encompasses the job opening for which such fees or costs are sought. An email, verbal or other informal contact with any person within BWXT will not create a binding agreement. Agencies or recruiters without an Agreement are directed not to contact any hiring managers of BWXT with recruiting inquiries or resumes. Recruiters and agencies interested in partnering with BWXT may contact BWXT’s Talent Acquisition team at View email address on click.appcast.io.