Cloud Security Engineer

Peraton • Linthicum, MD

13d • Onsite

About The Position

Peraton is seeking a Cloud Security Engineer for its Linthicum, Maryland office to support a Department of War customer and the DC3 Cloud Environment. The role contributes to mission-focused cybersecurity activities, including cloud security engineering, cyber threat analysis, digital forensics support, and protection of national-security systems and data. The engineer will help plan, build, manage, and continuously improve the security of cloud deployments, ensuring that cloud design, configuration, implementation, data controls, monitoring, logging, networking, storage, and architecture comply with applicable Department of War requirements, the Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and other security requirements. The position also configures and integrates vulnerability-management tools into production environments and CI/CD pipelines, and works with architecture, development, operations, and security teams to harden, monitor, and secure cloud environments throughout their lifecycle.

Requirements

• Proficiency in cybersecurity principles and technologies, including firewalls, intrusion detection systems (IDS), and security information and event management (SIEM) platforms.
• Knowledge of RMF, STIGs, ATO and Continuous ATO processes, associated documentation, and risk-scoping best practices.
• Experience with cloud platforms, including AWS and Azure.
• Experience supporting AWS cloud migrations.
• Knowledge of cloud networking, storage, architecture, data controls, monitoring, and logging.
• Experience with cloud observability toolsets.
• Understanding of version-control systems, including Git, and their integration with CI tools such as GitLab CI.
• Experience configuring and integrating cybersecurity tools within CI/CD pipelines.
• Familiarity with Kubernetes environments, container security, and Kubernetes package-management tools such as Helm.
• Basic understanding of Linux administration and programming or scripting languages, including Java, Python, and C#.
• Understanding of infrastructure and configuration-as-code tools, including Ansible and Terraform.
• Experience with IAM solutions, including Azure Entra ID, AWS IAM, and Keycloak.
• Active Top Secret clearance with SCI eligibility.
• Active CompTIA Security+ certification that must remain current.
• Minimum experience requirements: 10 years with an AS/AA, 8 years with a BS/BA, 6 years with an MS/MA, or 3 years with a PhD. Four additional years of experience may be considered in lieu of a bachelor’s degree.

Nice To Haves

• AWS Certified Security – Specialty certification.
• (ISC)² Certified Cloud Security Professional (CCSP).
• CompTIA SecurityX/CASP+ certification.
• Certified Information Systems Security Professional (CISSP).
• CISSP–Information Systems Security Engineering Professional (CISSP-ISSEP).
• Microsoft Certified: Azure Security Engineer Associate (AZ-500).
• CISSP–Information Systems Security Architecture Professional (CISSP-ISSAP).
• Microsoft Certified: Azure Fundamentals (AZ-900).

Responsibilities

• Support the planning, design, implementation, hardening, and management of secure cloud environments.
• Assess and implement cybersecurity controls across cloud infrastructure, applications, networks, storage, identity services, and data-management components.
• Ensure cloud deployments comply with applicable Department of War cybersecurity requirements, RMF controls, STIGs, and security best practices.
• Support Authorization to Operate (ATO) and Continuous ATO activities, including development and maintenance of required security documentation and evidence.
• Configure and maintain tools for vulnerability scanning, assessment, remediation tracking, and continuous monitoring.
• Integrate cybersecurity tooling into CI/CD pipelines used by development teams to deploy cloud-based solutions.
• Support secure AWS cloud migration activities.
• Implement and maintain cloud logging, monitoring, alerting, observability, and security-information capabilities.
• Collaborate with architecture and engineering teams to secure cloud networking, storage, Kubernetes environments, containers, and infrastructure-as-code deployments.
• Support identity and access management, least-privilege access, authentication, authorization, and privileged-access security controls.
• Apply risk-analysis methods and best practices to determine the scope, severity, and treatment of identified cybersecurity risks.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree