Principal Cloud Security Engineer

Koniag Government Services, LLC•Washington, DC

5d•$150,000 - $190,000•Hybrid

About The Position

Koniag Technology Solutions, Inc a Koniag Government Services company, is seeking a Principal Cloud Security Engineer with a Secret security clearance to support KTS and our government customer in Washington, DC. The position is onsite with possibly hybrid availability. This position is for a Future New Business Opportunity. This position is covered under the Service Contract Act. Koniag Government Services is seeking an experienced Principal Cloud Security Engineer to join a dynamic team supporting cloud security architecture, implementation, and continuous monitoring across multiple cloud platforms. The ideal candidate is a technically proficient security professional with hands-on experience securing environments across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). This individual will be passionate about cybersecurity, committed to staying current with evolving threats and technologies, and capable of applying their expertise to solve complex, real-world security challenges in a federal government context. The ability to obtain or maintain an active Secret clearance is required to support our government customer. The Principal Cloud Security Engineer will serve as the lead technical authority and SME for cloud security architecture, governance, and advanced threat defense across multi-cloud enterprise environments, including AWS, Microsoft Azure, and Google Cloud Platform (GCP). In this leadership role, you will define the multi-cloud security vision, architect complex security frameworks, drive tool selection and integration, and ensure robust security postures that align with federal compliance mandates and agency risk tolerances. As a strategic technical lead, the Principal Engineer will bridge high-level enterprise risk management with hands-on engineering execution. You will mentor engineering teams, partner with agency leadership and System Owners, and lead Assessment and Authorization (A&A) strategies to maintain continuous authorization to operate (ATO) in high-stakes federal cloud environments.

Requirements

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Systems Engineering, or a related field from an accredited college or university.
8+ years of progressive professional experience in cybersecurity, cloud security engineering, network defense, or system architecture, with at least 5+ years dedicated to architecting and securing enterprise cloud environments.
Proven track record architecting and executing security controls across at least two major cloud service providers (AWS, Azure, GCP).
Deep expertise with federal security frameworks, including FISMA High/Moderate, FedRAMP, NIST SP 800-53 (Rev. 5), NIST SP 800-37 (RMF), and CMMC.
Active Secret clearance or higher (Top Secret preferred).
Exceptional written, verbal, and presentation skills, with a proven ability to articulate complex cybersecurity risks and technical architectures to executive leadership, Authorizing Officials, and technical teams.
Advanced proficiency engineering and hardening enterprise infrastructure across AWS, Azure, and GCP (IaaS, PaaS, and SaaS models).
Hands-on expertise configuring and scaling enterprise tools including CSPM/CWPP suites, vulnerability management (e.g., Qualys, Tenable), file integrity monitoring (e.g., Tripwire), and enterprise SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel).
Strong experience embedding security testing and guardrails into DevSecOps workflows using Infrastructure as Code (IaC) templates (Terraform, Bicep, CloudFormation) and CI/CD pipelines.
Deep understanding of zero-trust architecture, enterprise identity federation, privilege management, SAML 2.0, OAuth2, and OIDC across multi-tenant cloud environments.
Demonstrated ability to author, review, and defend complex SSPs, control worksheets, and POAMs to secure ATO approvals.
Proven ability to resolve critical technical bottlenecks, address emerging security threats, and drive security automation to reduce operational overhead.

Nice To Haves

Master’s degree preferred.
Master’s degree in Cybersecurity, Information Assurance, or Computer Science.
Industry Certifications (One or more strongly preferred): Executive/Architect: CISSP, CCSP, CISM.
Cloud Provider Specific: AWS Certified Security – Specialty, Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Certified: Azure Security Engineer Associate (AZ-500), or Google Professional Cloud Security Engineer.
Experience integrating security operations with GRC platforms (e.g., ServiceNow GRC, eMASS, CSAM).
Expertise securing containerized workloads and orchestration systems (Kubernetes, EKS, AKS, GKE) and serverless deployment models.
Applied knowledge of NIST SP 800-207 Zero Trust Architecture principles and implementation strategies across hybrid federal enterprises.

Responsibilities

Lead the design, engineering, and execution of scalable, resilient multi-cloud security solutions across AWS, Azure, and GCP that address complex threat vectors, zero-trust paradigms, and stringent federal mandates.
Drive the strategic evaluation, selection, architectural integration, and optimization of cloud-native and enterprise third-party security platforms (CSPM, CWPP, CIEM, SIEM, and Vulnerability Management).
Direct the configuration, enforcement, and integration of cloud-native security frameworks (e.g., AWS Security Hub/Config, Azure Defender/Policy, GCP Security Command Center Premium) with enterprise security operations centers (SOC).
Pioneer "Security as Code" initiatives by integrating automated security controls, guardrails, compliance scanning, and vulnerability checks directly into Infrastructure as Code (IaC) and CI/CD pipelines.
Oversee the creation, validation, and maintenance of comprehensive Assessment and Authorization (A&A) packages, including System Security Plans (SSPs), Security Assessment Reports (SARs), and continuous authorization artifacts.
Lead security impact assessments for enterprise-level system architectural changes, evaluating complex risks and defining remediation strategies without impacting operational tempo.
Establish proactive continuous monitoring, threat hunting, and incident handling protocols across multi-cloud environments utilizing integrated SIEM, SOAR, and telemetry platforms (e.g., Splunk, Sentinel, Qualys).
Serve as the principal technical liaison to agency leadership, Authorizing Officials (AOs), CISOs, and cross-functional engineering leads to align technical security strategies with mission objectives.
Mentor senior and mid-level security engineers, establishing operational guidelines, standard operating procedures (SOPs), and engineering baselines across the organization.