Cloud Security Engineer

MatrixSpace • Burlington, MA

1d • Hybrid

About The Position

MatrixSpace is seeking a hands-on Cloud Security Engineer to build, operate, assess, and secure AWS environments that support trusted technology for U.S. government customers. The role spans cloud engineering, DevOps, security, and compliance, with a focus on secure infrastructure, deployment and release workflows, and FedRAMP and other government security requirements.

The engineer will work with Software Engineering and AI teams to integrate security and compliance into system architecture and operational workflows, support authorization and continuous monitoring, and contribute to Release Engineering initiatives. This role is not fully remote; the employee is expected to work onsite multiple days per week. The position may involve direct or indirect work with the U.S. Government in restricted environments. Candidates must be legally authorized to work in the United States without employer sponsorship and may be required to obtain and maintain a U.S. government security clearance in the future.

Requirements

• 3–6 years of experience in security engineering, cloud security, DevSecOps, infrastructure security, or a related technical field.
• Hands-on AWS experience, including networking, Linux, IAM, encryption, logging, vulnerability management, and security monitoring.
• Experience with one or more security frameworks, such as FedRAMP, NIST 800-53, NIST 800-171, CMMC, RMF, or similar standards.
• Experience translating security and compliance requirements into practical technical controls alongside engineering teams.
• Hands-on experience with DevOps practices, Infrastructure as Code, source control, CI/CD pipelines, and automated deployment workflows.
• Knowledge of system hardening, vulnerability remediation, secure configurations, and security control lifecycle management.
• Strong problem-solving, communication, and cross-functional collaboration skills.
• Legally authorized to work in the United States without employer sponsorship.
• May be required to obtain and maintain a U.S. government security clearance in the future.

Nice To Haves

• Direct experience supporting a FedRAMP authorization, particularly in a FedRAMP High environment.
• Familiarity with AWS GovCloud and NIST 800-53.
• Experience working directly with external assessors, compliance partners, or a Third-Party Assessment Organization (3PAO).
• Understanding of FIPS 140, encryption and key management, secure system boundaries, and requirements associated with Controlled Unclassified Information (CUI).
• Experience hardening Linux operating systems using DISA STIGs or similar security configuration standards.
• Experience with Infrastructure as Code technologies such as Terraform or Pulumi, and/or Python automation.

Responsibilities

• Build, operate, assess, and secure AWS environments against established security baselines, FedRAMP requirements, and other applicable standards.
• Partner with Software Engineering and AI teams to incorporate security and compliance requirements into system architecture, CI/CD, deployment, and operational workflows.
• Support FedRAMP authorization and continuous monitoring, including evidence collection, control maintenance, audit preparation, POA&Ms, and remediation tracking.
• Perform or support security architecture reviews, risk and gap assessments, vulnerability management, and system hardening, including applicable DISA STIGs.
• Implement security controls across networking, Linux systems, IAM, encryption, logging, and security monitoring.
• Build and maintain Infrastructure as Code, CI/CD, deployment, and release automation using tools such as Terraform, Pulumi, and Python, incorporating security and compliance into repeatable infrastructure deployments.
• Maintain security documentation, system diagrams, asset inventories, and control implementation details.
• Work with engineering teams, external assessors, compliance partners, and 3PAOs on assessments, audits, evidence requests, and ongoing authorization requirements.
• Contribute to Release Engineering initiatives involving CI/CD pipelines, deployment automation, release workflows, cloud infrastructure, developer tooling, and platform reliability.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed