Automation Cybersecurity Engineer for Cloud and Compliance

Booz Allen Hamilton; Annapolis (MD); On-site; USD 87,000 - 198,000; Full time

Benefits offered by this job

Health benefits

Tuition assistance

Work-life programs

Retirement benefits

Job summary

Booz Allen Hamilton is seeking a Cybersecurity Engineer in Annapolis, MD to design, implement, and automate complex cyber activities while applying broad security and compliance knowledge. You will mentor teammates and work with minimal direction, delivering repeatable, auditable workflows.

The role emphasizes integration across REST APIs, cloud services, and enterprise systems, supporting Public Trust readiness and defense-grade controls.

Qualifications

• Experience with cybersecurity frameworks (CMMC/NIST 800-171/FedRAMP) and DoD controls.
• Experience automating cybersecurity, compliance, cloud governance, or infrastructure operations.
• Experience integrating REST APIs, Git repositories, Jira, ServiceNow, cloud APIs, or enterprise systems.
• Ability to translate complex security/compliance requirements into repeatable workflows and technical requirements.

Responsibilities

• Design, implement, integrate, and maintain systems/tools to automate complex cyber activities.
• Mentor and supervise team members while operating with minimal direction.
• Translate security requirements into traceable, auditable automated processes.

Skills

Security frameworks

Automation development

API integration

Public Trust

SSP/POA&M concepts

Education

Bachelor's degree

Tools

Terraform

CloudFormation

CDK

OPA

Policy-as-code

Jira

ServiceNow CMDB

GitHub Enterprise

Job description

Booz Allen Hamilton is seeking a Cybersecurity Engineer in Annapolis, MD to design, implement, and automate complex cyber activities while applying broad security and compliance knowledge. You will mentor teammates and work with minimal direction, delivering repeatable, auditable workflows.

The role emphasizes integration across REST APIs, cloud services, and enterprise systems, supporting Public Trust readiness and defense-grade controls.