Security Engineer, Senior

Booz Allen Hamilton•Usa, DC

7d•$86,800 - $198,000•Remote

About The Position

As a cloud security architect, you know how to assess and implement requirements that ensure the safety of information systems and protect them against intentional or inadvertent access or destruction. We need you to guide the development of cloud-based security architectures for some of the government’s most critical data systems. As a cloud security architect on our team, you’ll integrate cybersecurity, authorization, compliance, and DevSecOps practices across cloud platforms, infrastructure, applications, data platforms, and CI/CD workflows. You’ll help secure and authorize cloud-native environments, with a focus on AWS GovCloud and Databricks. You’ll recommend tools and capabilities based on your research of the current environment and knowledge of various on-premises, cloud-based, and hybrid resources to address risk management framework (RMF). Your technical expertise will be vital as you work with clients to ensure standards are met with information assurance and security requirements. This is an opportunity to use the latest cloud technologies as you look for ways to secure your customer’s environment. You’ll continue to strengthen your skills in automation, cloud-based security, data engineering, and AWS while mentoring tomorrow’s cloud security experts.

Requirements

5+ years of experience in security engineering, cloud security architecture, or securing large‑scale distributed systems
Experience designing and implementing cloud security controls, monitoring strategies and threat detection capabilities, and supporting security metrics, incident response, root‑cause analysis, and post‑incident improvements
Experience securing workloads in AWS, including in regulated or sensitive cloud environments
Experience with data platforms and data security
Experience with scripting and automation using Python, Bash, or Go
Experience with Infrastructure‑as‑Code such as Terraform
Experience with SIEM, observability, and monitoring platforms such as Splunk, Elastic, CloudWatch, Prometheus, or OpenTelemetry
Experience with containers and orchestration platforms such as Docker and Kubernetes
Experience securing CI/CD pipelines and cloud‑native delivery processes
Knowledge of cloud security, compliance frameworks, and production security best practices
Public Trust determination is required.
Bachelor's degree

Nice To Haves

Experience securing or modernizing government or financial systems
Experience with event‑driven or streaming platforms such as Kafka, Confluent and AWS MKS
Experience with chaos engineering or advanced reliability and fault‑injection practices
Experience operating in multi‑cloud or hybrid environments
Experience tracking Authority to Operate milestones, control dependencies, risks, evidence needs, assessor actions, and POA&M remediation
Professional‑level AWS Certifications such as AWS Security - Specialty Certification
Security Certifications such as CISSP Certification

Responsibilities

Guide the development of cloud-based security architectures for critical data systems.
Integrate cybersecurity, authorization, compliance, and DevSecOps practices across cloud platforms, infrastructure, applications, data platforms, and CI/CD workflows.
Secure and authorize cloud-native environments, with a focus on AWS GovCloud and Databricks.
Recommend tools and capabilities based on research of the current environment and knowledge of various on-premises, cloud-based, and hybrid resources to address risk management framework (RMF).
Work with clients to ensure standards are met with information assurance and security requirements.
Use the latest cloud technologies to secure customer environments.
Strengthen skills in automation, cloud-based security, data engineering, and AWS.
Mentor tomorrow’s cloud security experts.