AWS CLOUD SECURITY & GUARDRAILS ENGINEER (Must have active TS/SCI clearance)
About The Position
An experienced AWS Cloud Security & Guardrails Engineer is sought to join a skilled team delivering advanced cloud engineering capabilities for a mission-critical, security-sensitive, highly classified modernization initiative. The engineer will help shape security architecture for sophisticated AWS platforms, translating security requirements into practical identity, encryption, and observability guardrails that engineering teams can use confidently. The program builds next-generation cloud infrastructure and integration platforms connecting intelligence, operational data, and mission systems through APIs, MCP servers, and cloud-native technologies. This is a full-time, on-site position requiring an active TS/SCI clearance and U.S. citizenship. The employee must reside within commuting distance of an approved secure work location in Herndon, Virginia; Washington, DC; Seattle, Washington; or Denver, Colorado. Regular on-site work in an approved secure facility is required, and occasional work at authorized customer facilities may be required. The candidate must also be eligible for applicable SCI read-on/indoctrination and additional program-specific access approvals.
Requirements
- At least 5 years of engineering experience, including at least 3 years of hands-on AWS experience.
- Strong knowledge of AWS IAM, KMS, logging, and cloud security architecture.
- Experience reviewing technical implementations against security requirements.
- Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.
- Active TS/SCI clearance; must be eligible for applicable SCI read-on/indoctrination and additional program-specific access approvals.
- Must reside within commuting distance of an approved secure work location in Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
- U.S. citizenship is required pursuant to a government contract.
- Ability to work on-site in an approved secure facility; this is not a remote position.
Nice To Haves
- Experience with automated policy validation or infrastructure-as-code security.
- Experience supporting formal security authorization activities.
- Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.
Responsibilities
- Design and improve AWS IAM policies, encryption controls, and centralized logging patterns.
- Review cloud architectures and infrastructure code for security risks.
- Support security assessment documentation and evidence collection.
- Partner with engineering teams to embed reusable security guardrails in deployment workflows.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
