AWS Cloud Compliance Engineer – FedRAMP & CUI Security

UC Irvine; Irvine (CA); On-site; USD 111,000 - 161,000; Full time

Job summary

UC Irvine’s Office of Information Technology is seeking a Cloud Compliance Engineer to independently administer and secure federal research compliant enclaves on AWS, ensuring regulatory compliance as requirements evolve. You will use IaC tools and security best practices to protect CUI and cloud workloads.

Responsibilities include documenting controls, maintaining system security plans, and collaborating with technical and non-technical stakeholders in a regulated research computing environment.

Qualifications

• In-depth knowledge of cloud infrastructure administration with hands-on AWS experience across compute, storage, networking, and IAM.
• Advanced knowledge of federal research grant control frameworks and their security requirements in cloud environments.
• Experience with IaC tools such as Terraform or CloudFormation and configuration management tools like Ansible or Chef.

Responsibilities

• Apply advanced cloud engineering and security compliance expertise to independently administer and secure federal research compliant enclaves.
• Maintain continuous compliance as requirements evolve and select tools and controls accordingly.
• Create and maintain compliance documentation (SSPs, POA&Ms, control assessments).

Skills

Cloud infrastructure administration

AWS

Infrastructure as Code

Security compliance

Identity and access management

Education

Bachelor's degree in related area

Tools

Terraform

CloudFormation

Ansible

Chef

GitHub Actions

Job description

UC Irvine’s Office of Information Technology is seeking a Cloud Compliance Engineer to independently administer and secure federal research compliant enclaves on AWS, ensuring regulatory compliance as requirements evolve. You will use IaC tools and security best practices to protect CUI and cloud workloads.

Responsibilities include documenting controls, maintaining system security plans, and collaborating with technical and non-technical stakeholders in a regulated research computing environment.