Cloud Security Engineer

Peraton•Linthicum, MD

2d•$135,000 - $216,000•Onsite

About The Position

Peraton is seeking a Cloud Security Engineer to support a Department of War customer in its Linthicum, Maryland office. The role helps plan, build, manage, and continuously improve the DC3 Cloud Environment, supporting mission-focused cybersecurity activities such as cloud security engineering, cyber threat analysis, digital forensics support, and protection of national-security systems and data. The engineer will secure cloud deployments by ensuring that their design, configuration, implementation, data controls, monitoring, logging, networking, storage, and overall architecture comply with applicable Department of War requirements, the Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and other security requirements. The role also configures and maintains tools to identify, scan, prioritize, and remediate vulnerabilities in production deployments and CI/CD pipelines. Working with cloud architecture, development, operations, and security teams, the engineer helps ensure cloud environments are appropriately designed, hardened, monitored, and secured throughout the system lifecycle.

Requirements

Proficiency in cybersecurity principles and technologies, including firewalls, intrusion detection systems (IDS), and security information and event management (SIEM) platforms.
Knowledge of RMF, STIGs, ATO and Continuous ATO processes, associated documentation, and risk-scoping best practices.
Experience with cloud platforms, including AWS and Azure.
Experience supporting AWS cloud migrations.
Knowledge of cloud networking, storage, architecture, data controls, monitoring, and logging.
Experience with cloud observability toolsets.
Understanding of version-control systems, including Git, and their integration with CI tools such as GitLab CI.
Experience configuring and integrating cybersecurity tools within CI/CD pipelines.
Familiarity with Kubernetes environments, container security, and Kubernetes package-management tools such as Helm.
Basic understanding of Linux administration and programming or scripting languages, including Java, Python, and C#.
Understanding of infrastructure and configuration as code tools, including Ansible and Terraform.
Experience with IAM solutions, including Azure Entra ID, AWS IAM, and Keycloak.
Active Top Secret clearance with SCI eligibility.
Active CompTIA Security+ certification that must remain current.
Education and experience: minimum of 10 years with an AS/AA, 8 years with a BS/BA, 6 years with an MS/MA, or 3 years with a PhD. Four additional years of experience may be considered in lieu of a bachelor's degree.

Nice To Haves

AWS Certified Security – Specialty certification.
(ISC)² Certified Cloud Security Professional (CCSP) certification.
CompTIA SecurityX/CASP+ certification.
Certified Information Systems Security Professional (CISSP) certification.
CISSP–Information Systems Security Engineering Professional (CISSP-ISSEP) certification.
Microsoft Certified: Azure Security Engineer Associate (AZ-500) certification.
CISSP–Information Systems Security Architecture Professional (CISSP-ISSAP) certification.
Microsoft Certified: Azure Fundamentals (AZ-900) certification.

Responsibilities

Support the planning, design, implementation, hardening, and management of secure cloud environments.
Assess and implement cybersecurity controls across cloud infrastructure, applications, networks, storage, identity services, and data-management components.
Ensure cloud deployments comply with applicable Department of War cybersecurity requirements, RMF controls, STIGs, and security best practices.
Support Authorization to Operate (ATO) and Continuous ATO activities, including developing and maintaining required security documentation and evidence.
Configure and maintain tools for vulnerability scanning, assessment, remediation tracking, and continuous monitoring.
Integrate cybersecurity tooling into CI/CD pipelines used by development teams to deploy cloud-based solutions.
Support secure AWS cloud migration activities.
Implement and maintain cloud logging, monitoring, alerting, observability, and security-information capabilities.
Collaborate with architecture and engineering teams to secure cloud networking, storage, Kubernetes environments, containers, and infrastructure-as-code deployments.
Support identity and access management (IAM), least-privilege access, authentication, authorization, and privileged-access security controls.
Apply risk-analysis methods and best practices to determine the scope, severity, and treatment of identified cybersecurity risks.