AWS Cloud Security & Guardrails Engineer

AWS Cloud Security Guardrails Engineer (TS/SCI)

Location

Herndon, VA or Washington, DC (on-site)

Clearance

Active TS/SCI Type

Full-time

Overview

A federal program team building secure AWS platforms is adding a security engineer who can help set the security design from day one. The work centers on turning security requirements into usable identity, encryption, and observability guardrails that development teams can build on without second-guessing.

What You Will Do

• Build reusable security guardrails into deployment pipelines in partnership with engineering teams.
• Assess cloud architectures and infrastructure code for security gaps.
• Create and refine AWS IAM policies, KMS encryption controls, and centralized logging designs.
• Help assemble evidence and documentation for security assessments.

What You Bring

• 5 or more years of engineering experience, at least 3 of them hands-on in AWS.
• Deep working knowledge of AWS IAM, KMS, logging, and cloud security architecture.
• A track record of checking technical builds against defined security requirements.
• Ability to work well in a closely controlled operating environment.

Nice to Have

• Security for infrastructure as code, or automated policy validation.
• Hands-on support of formal security authorization efforts.
• AWS Professional or Specialty certification. Security+ or CISSP is a plus.

Additional Requirements

• Current, active TS/SCI. You must also qualify for SCI indoctrination and any program-level access approvals the customer requires.
• U.S. citizenship is required under the terms of the government contract.
• You must live within a reasonable daily commute of the secure site in Herndon, VA or Washington, DC.
• Full-time and fully on-site in an accredited secure facility, with occasional visits to approved customer sites. Remote work is not an option.