Senior Cloud Security Engineer

ZipStaff•Washington, DC

18d•Onsite

About The Position

ZipStaff is seeking an experienced Senior Cloud Security Engineer to design, implement, and safeguard robust AWS cloud environments for a major transportation organization. This high-visibility role involves architecting secure, highly resilient cloud solutions, establishing security guardrails, and leading DevSecOps integration. The engineer will serve as a subject matter expert in cloud threat modeling, regulatory compliance, and infrastructure automation, ensuring multi-account AWS environments adhere to Zero Trust principles while mentoring junior engineering staff. The position is an on-site W2 contract in Washington, DC; C2C and 1099 arrangements are not accepted.

Requirements

At least 7 years of broad IT experience across infrastructure, networking, and operating system management.
At least 5 years of hands-on expertise dedicated to AWS cloud infrastructure and application security.
Deep knowledge of AWS security services, containerization security (ECS and EKS), Zero Trust architecture principles, and multi-account management.
Strong hands-on proficiency with Infrastructure as Code tools such as Terraform or CloudFormation.
Proficiency in scripting languages such as Python, PowerShell, or Bash.
Demonstrated experience implementing and enforcing compliance standards such as NIST, CIS, ISO 27001, SOC 2, PCI, or HIPAA.
Ability to work independently, manage priority issues with urgency, drive collaborative solutions across integrated teams, and clearly communicate complex security concepts to key stakeholders.
Ability to work on-site in Washington, DC.

Nice To Haves

Prior experience designing multi-account AWS environments with Control Tower and IAM Identity Center.
Hands-on experience embedding DevSecOps controls into CI/CD pipelines and leading threat modeling or security architecture reviews.
Experience mentoring junior cloud security engineers in an enterprise or transportation environment.
Experience with SIEM integrations such as Microsoft Sentinel and with advanced CSPM or vulnerability management tools.

Responsibilities

Design and implement secure, multi-account AWS cloud architectures, landing zones using Control Tower, and least-privilege identity and access management solutions using AWS IAM and IAM Identity Center.
Define cloud security standards, governance frameworks, and automated guardrails.
Lead threat modeling, risk assessments, and security architecture reviews across cloud applications and infrastructure.
Configure network security controls, including VPC architecture, network segmentation, private connectivity, AWS WAF, and security group policies.
Drive security automation using Infrastructure as Code, including Terraform and CloudFormation.
Partner with development and operations teams to embed DevSecOps controls into CI/CD pipelines.
Oversee vulnerability management, cloud security posture management, SIEM integrations, and threat remediation using AWS Security Hub, GuardDuty, Config, CloudTrail, KMS, and Secrets Manager.
Align cloud environments with applicable industry frameworks, including NIST, CIS, ISO 27001, SOC 2, PCI, and HIPAA.
Mentor junior cloud security engineers and provide technical leadership across cross-functional teams.