AWS Cloud Security & Guardrails Engineer

Virtual Service Operations • Herndon, VA

5d • $165,000 - $210,000 • Onsite

About The Position

Virtual Service Operations (VSO) is seeking an experienced AWS Cloud Security & Guardrails Engineer to help deliver advanced cloud engineering capabilities for a mission-critical, security-sensitive initiative. The engineer will help shape security architecture for sophisticated AWS platforms, translating security requirements into practical identity, encryption, and observability guardrails that engineering teams can use confidently. The role involves collaboration with technical partners in a controlled environment where careful engineering and measurable results are valued.

The position is full-time and on-site, with regular work in an approved secure facility and possible occasional work at authorized customer facilities. Candidates must reside within commuting distance of an approved secure work location in Herndon, Virginia; Washington, DC; Seattle, Washington; or Denver, Colorado. This position requires U.S. citizenship and an active TS/SCI clearance, as well as eligibility for applicable SCI read-on/indoctrination and additional program-specific access approvals.

Requirements

• At least 5 years of engineering experience, including at least 3 years of hands-on AWS experience.
• Strong knowledge of AWS IAM, KMS, logging, and cloud security architecture.
• Experience reviewing technical implementations against security requirements.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.
• Active TS/SCI clearance; eligibility for applicable SCI read-on/indoctrination and additional program-specific access approvals.
• Must reside within commuting distance of an approved secure work location in Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
• U.S. citizenship is required.
• Excellent written and spoken communication skills.
• Ability to work independently and value teamwork.
• Excellent problem-solving skills.

Nice To Haves

• Experience with automated policy validation or infrastructure-as-code security.
• Experience supporting formal security authorization activities.
• Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.

Responsibilities

• Design and improve AWS IAM policies, encryption controls, and centralized logging patterns.
• Review cloud architectures and infrastructure code for security risks.
• Support security assessment documentation and evidence collection.
• Partner with engineering teams to embed reusable security guardrails in deployment workflows.

Benefits

• Ongoing learning and development opportunities.
• Competitive salaries.
• Health benefits.
• Flexible work arrangements.
• Benefits for eligible employees related to health, retirement, and professional development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed