AWS Cloud Security Engineer

Quevera

Herndon, Northern (VA, KY)

Hybrid

USD 140,000 - 190,000

Full time

2 days ago
Be an early applicant
Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

100% employer-paid medical coverage
Education stipend and professional dev
iQTouch Program
401(k) match
Profit-sharing

Job summary

Quevera is seeking an AWS Cloud Security Engineer with an active TS/SCI clearance to support security architecture, automation, compliance, and security posture management across a complex AWS environment.

The role involves work across Herndon, VA; Springfield, VA; Denver, CO; and Seattle, WA with an 80/20 split between low-side and high-side, and remote work is acceptable with SCIF attendance as needed.

Qualifications

  • Active TS/SCI clearance required.
  • Willing to work from AWS SCIFs as required.
  • Candidates must be local to Herndon, VA; Denver, CO; or Seattle, WA.

Responsibilities

  • Design and implement intelligent model-routing logic using ML-based classification to route requests to appropriate LLMs based on conversational context, task complexity, and performance requirements.
  • Build and maintain orchestration layers using AWS Bedrock, LangChain, or custom frameworks to support multi-model workflows.
  • Train, evaluate, and iterate on classification models using evaluation frameworks and feedback loops.
  • Architect conversation-context analysis, retrieval, and embedding strategies to interpret user intent across multi-turn interactions.
  • Develop prompt-engineering standards and context-window management techniques supporting intent classification and routing.
  • Architect enterprise-scale GenAI solutions with high availability, performance optimization, and cost management.
  • Apply GenAI platform practices including observability, model evaluation, guardrails, responsible AI controls, and versioning.
  • Design and maintain data extraction and transformation pipelines supporting model training, evaluation, and enterprise application integration.
  • Engage with customer stakeholders and technical counterparts to gather requirements, validate solutions, and participate in Agile/Scrum ceremonies.
  • Collaborate with the Engagement Manager to track progress and risks and produce technical documentation, architecture diagrams, and handoff artifacts.
  • Develop reusable Infrastructure as Code (IaC) and cross-account integrations to standardize and centralize security services across a complex, multi-vendor environment with distributed AWS accounts under an externally managed organization.
  • Assess current security posture and drive vendor alignment with organizational standards.
  • Help shape government security processes and support the production of compliance artifacts, including IATTs and ATOs.
  • Integrate distributed logging to a centralized reviewer (C5ISR).

Skills

TS/SCI clearance
AWS
Security engineering

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

AWS Cloud Security Engineer

Herndon, VA, US

3 days ago Requisition ID: 3519

Job Description:

Quevera is seeking an AWS Cloud Security Engineer with an active TS/SCI clearance to support security architecture, automation, compliance, and security posture management across a complex, multi-vendor AWS environment.

The position supports work across Herndon, Virginia; Springfield, Virginia; Denver, Colorado; and Seattle, Washington, with work split approximately 80% low-side and 20% high-side. Remote work is acceptable, but candidates must be willing and able to work from AWS SCIFs as required.

Job Responsibilities:
  • Design and implement intelligent model-routing logic using ML-based classification to route requests to appropriate LLMs based on conversational context, task complexity, and performance requirements.
  • Build and maintain orchestration layers using AWS Bedrock, LangChain, or custom frameworks to support multi-model workflows.
  • Train, evaluate, and iterate on classification models using evaluation frameworks and feedback loops.
  • Architect conversation-context analysis, retrieval, and embedding strategies to interpret user intent across multi-turn interactions.
  • Develop prompt-engineering standards and context-window management techniques supporting intent classification and routing.
  • Architect enterprise-scale GenAI solutions with high availability, performance optimization, and cost management.
  • Apply GenAI platform practices including observability, model evaluation, guardrails, responsible AI controls, and versioning.
  • Design and maintain data extraction and transformation pipelines supporting model training, evaluation, and enterprise application integration.
  • Engage with customer stakeholders and technical counterparts to gather requirements, validate solutions, and participate in Agile/Scrum ceremonies.
  • Collaborate with the Engagement Manager to track progress and risks and produce technical documentation, architecture diagrams, and handoff artifacts.
  • Develop reusable Infrastructure as Code (IaC) and cross-account integrations to standardize and centralize security services across a complex, multi-vendor environment with distributed AWS accounts under an externally managed organization.
  • Assess current security posture and drive vendor alignment with organizational standards.
  • Help shape government security processes and support the production of compliance artifacts, including IATTs and ATOs.
  • Integrate distributed logging to a centralized reviewer (C5ISR).
Desired Skills:
  • Active TS/SCI clearance required.
  • Must be willing and able to work from AWS SCIFs as required.
  • Candidates must be local to Herndon, Virginia; Denver, Colorado; or Seattle, Washington.
Work Location:
  • Customer Site – Springfield, Virginia
  • Seattle, Washington
  • Work split: approximately 80% low-side / 20% high-side.
  • Remote work is acceptable, with attendance at AWS SCIFs as required.
Why Join Quevera?
Award-Winning Culture

Quevera was recognized as a Top Workplace in the Washington, DC/Baltimore region for 2025, marking our fifth consecutive year receiving this distinction based on employee feedback.

We invest in our employees and their families through a highly competitive benefits package, including:

  • 100% employer-paid medical coverage (optional plan)
  • Competitive options for Medical, Dental and Vision insurance
  • Employer-paid short-term and long-term disability coverage
  • Employer-paid life insurance
  • $5,000 annually for education, training, certifications, and professional development
  • Career advancement through our structured iQTouch Program
  • Up to 6% 401(k) match
  • Additional 4% profit-sharing contribution, at company discretion

At Quevera, we believe exceptional people deserve exceptional opportunities. We're more than just a workplace—we're a team of innovators, problem-solvers, and industry experts committed to delivering mission-critical solutions while fostering professional growth, collaboration, and technical excellence.

Quevera is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age or any other characteristic protected by law. #LI-AA1

Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

AWS Cloud Security Engineer
AWS Cloud Security Engineer

Quevera-LLC • Herndon (VA)

Hybrid
USD 150,000 - 210,000
Employer-paid medical
401(k) match
Profit-sharing
+3
Senior Generative AI Engineer - AWS
Senior Generative AI Engineer - AWS

Quevera • Herndon (VA), Northern (KY)

Hybrid
USD 180,000 - 240,000
Top Workplace 2025 (Washington DC area
Employer-paid medical coverage
Education stipend
+2
Senior Generative AI Engineer - AWS
Senior Generative AI Engineer - AWS

Quevera, LLC. • Herndon (VA)

On-site
USD 150,000 - 195,000
100% employer-paid medical coverage
Medical/Dental/Vision options
Employer-paid disability coverage
+5
Sr. DevOps Engineer
Sr. DevOps Engineer

Quevera • Herndon (VA)

Hybrid
USD 110,000 - 140,000
100% employer-paid medical coverage
$5,000 annually for education and training
Up to 6% 401(k) match
+1
Senior AWS Solutions Architect
Senior AWS Solutions Architect

Quevera • Gaithersburg (MD), Northern (KY)

Hybrid
USD 160,000 - 210,000
100% employer-paid medical coverage
Education, training, certifications, &
Education & professional development
+4
Senior Generative AI Engineer - AWS
Senior Generative AI Engineer - AWS

Quevera-LLC • Herndon (VA)

On-site
USD 180,000 - 240,000
Medical coverage
Education stipend
401(k) match
+3
Cloud Software Engineer II
Cloud Software Engineer II

Quevera • Herndon (VA)

On-site
USD 140,000 - 180,000
100% Employer Paid Medical
Disability Insurance
Life Insurance
+4
Senior Cloud Infrastructure Engineer (HYBRID)
Senior Cloud Infrastructure Engineer (HYBRID)

Quevera • Laurel (MD)

On-site
USD 130,000 - 180,000
Medical coverage
Education stipend
401(k) match
+3
Senior Cloud Infrastructure Engineer (HYBRID)
Senior Cloud Infrastructure Engineer (HYBRID)

Quevera-LLC • Laurel (MD)

On-site
USD 156,000 - 206,000
100% employer-paid medical coverage
Education and training stipend $5,000/
6% 401(k) match
+1
Senior Cloud Infrastructure Engineer (HYBRID)
Senior Cloud Infrastructure Engineer (HYBRID)

Quevera • Maryland

Hybrid
USD 156,000 - 157,000
Medical coverage
Education stipend
iQTouch Program
+6