AWS Cloud Security & Guardrails Engineer

STEM Solutions • Herndon, VA

1d • Onsite

About The Position

The AWS Cloud Security & Guardrails Engineer will support a highly classified, mission-critical modernization initiative, helping build next-generation cloud infrastructure and integration platforms that connect fragmented intelligence, operational data, and mission systems through APIs, MCP servers, and cloud-native technologies. The role involves shaping the security architecture of sophisticated AWS platforms and translating security requirements into practical identity, encryption, and observability guardrails for engineering teams.

The engineer will work with experienced technical partners in a collaborative environment focused on careful engineering and measurable results. The position is full-time and on-site at an approved secure facility. The employee must reside within commuting distance of Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO. Regular on-site work and occasional work at authorized customer facilities may be required. U.S. citizenship is required pursuant to a government contract.

Requirements

• At least 5 years of engineering experience, including at least 3 years of hands-on AWS experience.
• Strong knowledge of AWS IAM, KMS, logging, and cloud security architecture.
• Experience reviewing technical implementations against security requirements.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.
• Active TS/SCI clearance; must be eligible for applicable SCI read-on/indoctrination and additional program-specific access approvals.
• Must reside within commuting distance of Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
• U.S. citizenship is required pursuant to a government contract.
• Able to work on-site at an approved secure facility; this is not a remote position.

Nice To Haves

• Experience with automated policy validation or infrastructure-as-code security.
• Experience supporting formal security authorization activities.
• Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.

Responsibilities

• Design and improve AWS IAM policies, encryption controls, and centralized logging patterns.
• Review cloud architectures and infrastructure code for security risks.
• Support security assessment documentation and evidence collection.
• Partner with engineering teams to embed reusable security guardrails in deployment workflows.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed