Cloud Security Engineer

Booz Allen Hamilton • McLean, VA

1d

About The Position

Design and implement secure cloud-based architectures for mission-critical Air Force systems. The role assesses and implements security requirements to protect information systems, recommends tools and capabilities based on research of on-premises, cloud, and hybrid environments, and addresses Risk Management Framework (RMF) requirements. The engineer works with the Air Force to meet information assurance and security standards, uses current cloud technologies to secure customer environments, and mentors developing cloud security professionals.

Requirements

• At least 3 years of experience evaluating system compliance using RMF or NIST and DevSecOps tools and methodologies.
• Experience deploying, configuring, or maintaining a government-approved cybersecurity tool suite and methods.
• Experience with automated security scanning and compliance, including managing DevSecOps pipelines within GitLab and using automated scanning tools such as SonarQube, OWASP ZAP, Trivy, KICS, or Checkmarx for SAST/DAST and infrastructure compliance.
• Experience with system hardening and secrets management, including securing cloud-deployable systems and container images, identifying vulnerabilities, and preventing credential exposure.
• Experience architecting network and data-flow diagrams, compiling hardware and software bodies of evidence, and documenting Ports, Protocols, and Services (PPSM).
• Experience evaluating and recommending cloud services, tools, and technologies for government organizations.
• Experience writing infrastructure as code using AWS CloudFormation or Terraform.
• Secret clearance; applicants are subject to a security investigation and may need to meet eligibility requirements for classified information access.
• Bachelor's degree in Computer Science or a Cybersecurity field.
• DoD 8570/8140 IAT II certification, such as CompTIA Security+.

Nice To Haves

• Experience with containerization technologies such as Docker.
• Experience using Confluence or Jira.
• Intermediate-level cloud computing certification, such as Certified Cloud Security Professional (CCSP), Certified AWS Solutions Architect, or DevOps Engineer Certification.

Responsibilities

• Design and implement secure cloud-based architectures and mission-critical systems.
• Recommend tools and capabilities based on the current environment and knowledge of on-premises, cloud-based, and hybrid resources to address RMF requirements.
• Work with the Air Force to ensure information assurance and security requirements and standards are met.
• Evaluate and recommend cloud services, tools, and technologies to improve efficiency and enhance system capabilities for government organizations.
• Use cloud-based security expertise to secure customer environments.
• Mentor developing cloud security professionals.
• Evaluate system compliance using RMF or NIST and DevSecOps tools and methodologies.
• Deploy, configure, or maintain government-approved cybersecurity tools and methods.
• Manage DevSecOps pipelines and automated security scanning and compliance.
• Secure cloud-deployable systems and container images by identifying vulnerabilities and preventing credential exposure.
• Architect network and data-flow diagrams, compile hardware and software bodies of evidence, and document Ports, Protocols, and Services (PPSM).
• Write infrastructure as code using tools such as AWS CloudFormation or Terraform to streamline deployments, provisioning, and configuration management.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level