Cloud Security Engineer

Booz Allen Hamilton•Springfield, VA

6d•$86,800 - $198,000•Remote

About The Position

Cloud environments are powerful, but they only support the mission when organizations can see what is happening across them. Audit logs, security telemetry, and reliable monitoring give teams the visibility they need to protect systems, investigate issues, and make informed decisions. We are looking for a Cloud Security Engineer to help integrate OCI environments with enterprise security-monitoring capabilities in a mission-focused environment. In this role, you’ll work at the intersection of cloud security, enterprise monitoring, and operational support. You’ll design and implement solutions that collect, protect, route, normalize, and validate telemetry across cloud, network, platform, operating system, database, and application layers. You’ll also troubleshoot integration issues and help ensure security data is complete, timely, and actionable. You’ll collaborate with engineering, security, infrastructure, operations, and customer stakeholders to turn requirements into practical architectures, test plans, dashboards, and runbooks. Your work will help establish trusted visibility across the environment and support secure cloud onboarding, authorization, and long-term operations. If you’re ready to apply your cloud security experience to systems that matter, we invite you to join us.

Requirements

8+ years of experience in cloud security engineering, cybersecurity, or security architecture
Experience integrating commercial cloud environments with agency-specific enterprise services and identity architectures
Experience designing, deploying, securing, and operating OCI solutions
Experience integrating cloud audit, logging, monitoring, and security telemetry with enterprise SIEM and monitoring platforms
Experience configuring telemetry sources across cloud, network, platform, operating system, database, and application layers
Experience designing secure log-collection and forwarding architectures using APIs, agents, syslog, event streaming, object storage, message queues, or comparable technologies
Experience validating log completeness, integrity, retention, access restrictions, parsing, normalization, and monitoring coverage
Experience troubleshooting SIEM integration issues and remediating monitoring gaps, ingestion failures, field-mapping problems, and alert noise
Active TS/SCI clearance; willingness to take a polygraph exam
Bachelor’s degree

Nice To Haves

Experience with enterprise audit collection and SIEM platforms such as Cribl and Elastic
Experience supporting authorization packages, control validation, or remediation tracking
Experience with Terraform, OCI Resource Manager, or comparable automated cloud configuration tools
Experience supporting cloud security operations in classified, regulated, or other mission environments
Architecture, Security, Networking, or Cloud Operations Associate- or Professional-level OCI Certifications

Responsibilities

Integrate commercial cloud environments with agency enterprise services and security-monitoring architectures.
Design, deploy, secure, and operate OCI solutions involving IAM, Audit, Logging, Cloud Guard, network security, secrets, and key management.
Integrate OCI audit, logging, monitoring, and security telemetry with enterprise SIEM and monitoring platforms.
Configure audit and telemetry sources across cloud, network, platform, operating system, database, and application layers.
Design secure log-collection and forwarding architectures using APIs, agents, syslog, event streaming, object storage, message queues, or comparable mechanisms.
Validate log completeness, timeliness, integrity, retention, access restrictions, parsing, normalization, and monitoring coverage.
Troubleshoot SIEM integration issues involving connectivity, ingestion, certificates, proxies, firewalls, field mapping, alerting, and dashboards.
Develop architecture diagrams, integration designs, test plans, dashboards, runbooks, and stakeholder communications.