Cleared AWS Cloud Security & Guardrails Engineer (Washington, DC)

Virtual Service Operations • Washington, DC

5d • $165,000 - $220,000 • Onsite

About The Position

Virtual Service Operations (VSO) is seeking an experienced AWS Cloud Security & Guardrails Engineer to support a mission-critical, security-sensitive initiative. The role helps shape the security architecture of sophisticated AWS platforms by translating security requirements into practical identity, encryption, and observability guardrails. The engineer works with technical partners in a collaborative environment focused on careful engineering and measurable results. This is a full-time, on-site position and is not remote. Regular on-site work at an approved secure facility is required, and occasional work at authorized customer facilities may be required. The employee must live within commuting distance of an approved secure work location in Herndon, Virginia; Washington, DC; Seattle, Washington; or Denver, Colorado. Active TS/SCI clearance and eligibility for applicable SCI read-on/indoctrination and additional program-specific access approvals are required. U.S. citizenship is required under a government contract.

Requirements

• At least 5 years of engineering experience, including at least 3 years of hands-on AWS experience.
• Strong knowledge of AWS IAM, KMS, logging, and cloud security architecture.
• Experience reviewing technical implementations against security requirements.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.
• Active TS/SCI clearance; eligibility for applicable SCI read-on/indoctrination and additional program-specific access approvals.
• Must reside within commuting distance of an approved secure work location in Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
• U.S. citizenship is required pursuant to a government contract.
• Excellent written and spoken communication skills.
• Ability to work independently and value teamwork.
• Excellent problem-solving skills.

Nice To Haves

• Experience with automated policy validation or infrastructure-as-code security.
• Experience supporting formal security authorization activities.
• Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.

Responsibilities

• Design and improve AWS IAM policies, encryption controls, and centralized logging patterns.
• Review cloud architectures and infrastructure code for security risks.
• Support security assessment documentation and evidence collection.
• Partner with engineering teams to embed reusable security guardrails in deployment workflows.

Benefits

• Ongoing learning and development opportunities.
• Competitive salaries.
• Health benefits.
• Flexible work arrangements.
• Benefits for eligible employees related to health, retirement, and professional development.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed