Security Engineer

Job Description

Role Overview

\n

Will assist in implementing and supporting cloud security protocols, infrastructure automation, and compliance programs across multiple cloud platforms. This position’s scope includes managing identity access, infrastructure as code, vulnerability management, monitoring, and incident response to ensure operational excellence and regulatory compliance.

\n

\n

Key Responsibilities

\n

\n
• Monitor and verify the operational status of Zero Trust Network Access tools (e.g., Zscaler ZPA / Prowler).
\n
• Support secrets management workflows in HashiCorp Vault, including credential generation, secret updates, and automated rotation processes.
\n
• Review and confirm IAM policies, roles, and permissions align with least privilege principles under senior engineer oversight.
\n
• Execute, test, and troubleshoot Infrastructure as Code (IaC) modules using Terraform across cloud platforms (AWS, Azure, GCP).
\n
• Monitor and troubleshoot build and deployment pipelines in systems like GitHub Actions, GitLab CI, or Azure Pipelines.
\n
• Assist with container image security, building, and deployment for Kubernetes environments such as EKS, AKS, or GKE.
\n
• Support collection of audit evidence for FedRAMP Continuous Monitoring cycles, focusing on controls such as CM-2, CM-6, AU-2, and SC-12.
\n
• Maintain and optimize dashboards and metrics in Grafana and CloudWatch, ensuring alert configurations are accurate.
\n
• Perform low-severity system health checks and manage alert triaging to prevent alert fatigue
\n
• Support open telemetry operations for real-time application and system monitoring. Core
\n

\n

\n

Qualifications & Requirements

\n

\n
• 1+ years of experience in DevOps, SRE or Security Engineering capacity
\n
• Proficiency in Linux command-line environment (Bash), managing system logs, permissions, and basic troubleshooting.
\n
• Foundational understanding of networking concepts (DNS, TCP/IP, SSH, subnets, firewalls).
\n
• Basic exposure to cloud platforms (AWS preferred) and version control systems (Git, GitHub, GitLab).
\n
• Familiarity with scripting languages such as Python or Bash for automation.
\n
• Strong security awareness including principles like least privilege, multi-factor authentication, IAM, and encryption fundamentals.
\n

\n

\n

Nice-to-Have Qualifications

\n

\n
• Experience with Infrastructure as Code tools (Terraform, CloudFormation).
\n
• Familiarity with container technologies (Docker) and CI/CD pipelines (GitHub Actions, GitLab CI).
\n
• Knowledge of ticketing and monitoring tools (Jira, ServiceNow, CloudWatch, Grafana).
\n
• Awareness of federal security standards (FedRAMP, NIST 800-53, SOC 2).
\n