Senior Cloud Security Engineer

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a "work hard, play hard" mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.


The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual's technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we're looking for:

We are seeking a Senior Cloud Security Engineer to serve as a multi-cloud cybersecurity engineering subject matter expert across Microsoft Azure and Amazon Web Services (AWS). In this role, you will design, implement, automate and secure cloud solutions that support post-quantum cryptography (PQC) readiness and strengthen enterprise cybersecurity capabilities. You bring a strong blend of cloud security engineering, identity governance, Infrastructure as Code, cryptographic enforcement and continuous monitoring experience. You work well with ISOs, ISSOs, architects and OCIO stakeholders to make sure cloud services and PQC resources are deployed securely, aligned to federal mandates and engineered consistently across the enterprise. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you'll be doing:

• Design, implement and secure cloud solutions in Azure and AWS in support of PQC readiness and enterprise cybersecurity capabilities.
• Support PQC migration activities, lab provisioning and cloud-hosted enterprise services.
• Develop and maintain standard operating procedures (SOPs) for both the AWS and Azure labs and their supporting cloud infrastructure.
• Troubleshoot testing tools provisioned in AWS and Azure hosted environments, applying cloud platform knowledge to diagnose and resolve issues (tool SME expertise not required).
• Automate cloud deployments and security controls using Infrastructure as Code.
• Implement and enforce cryptographic standards and controls across cloud environments.
• Configure, manage and secure cloud-native key management services, including AWS Key Management Service (KMS) and Azure Key Vault.
• Scale cloud environments as needs grow and support cryptographic agility, enabling algorithms and configurations to be updated or replaced with minimal disruption.
• Manage identity governance and access controls within multi-cloud environments.
• Perform vulnerability management and support continuous monitoring across Azure and AWS workloads.
• Configure and manage virtual networks, subnets, firewalls, routing and Domain Name System (DNS).
• Manage virtual machines, storage, backup and disaster recovery and hybrid-cloud integrations.
• Collaborate with Information System Officers (ISOs), Information System Security Officers (ISSOs), architects and Office of the Chief Information Officer (OCIO) stakeholders to ensure services are deployed securely and in alignment with federal mandates.
• Promote consistent engineering practices and standards across the enterprise.

What you need to know:

• Multi-cloud security engineering across Microsoft Azure and AWS.
• Virtual networking concepts, including subnets, firewalls, routing and DNS.
• Compute services in AWS (EC2, Lambda, ECS/EKS) and Azure (VMs, Functions, AKS).
• Storage, backup, disaster recovery and hybrid-cloud integration.
• Identity governance and access management in cloud environments.
• Infrastructure as Code (IaC) and security automation practices.
• Cryptographic enforcement, crypto agility and PQC concepts.
• Cloud-native key management, including AWS KMS and Azure Key Vault.
• Vulnerability management and continuous monitoring.
• Federal cybersecurity mandates and compliance requirements.

Must have's:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering or 4+ additional years of experience in lieu of the degree.
• (ISC)2 Certified Information Security Professional (CISSP) or CISM
• 5+ years of experience performing the functions described above.
• Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
• Hands-on experience securing workloads in both Azure and AWS.
• Hands-on experience with cloud-native key management services, including AWS KMS and Azure Key Vault.
• Working knowledge of both AWS and Azure sufficient to troubleshoot third-party testing tools deployed in those environments.
• Ability to work collaboratively with security, architecture and executive stakeholders.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must be a U.S. citizen in compliance with federal contract requirements.

Beneficial to have:

• Azure Security Engineer or Azure Solutions Architect certification.
• AWS Security Specialty or AWS Solutions Architect certification.
• Familiarity with cryptographic agility practices in AWS and Azure environments.
• Prior experience supporting a federal civilian agency IT program.

Where it's done:

• Remote (Herndon, VA).