AWS Cloud / Security Engineer

ECS Corporate Services; Stafford (VA); Hybrid; USD 100,000 - 120,000; Full time

Benefits offered by this job

Active Secret clearance

Hands-on AWS security experience

Kubernetes experience

Git version control

Security+ certification or equivalent

Job summary

Everforth ECS seeks an AWS Cloud Security Engineer to join the Security & Infrastructure team in Stafford, VA. The role focuses on designing and maintaining secure AWS infrastructure for CODIS, ensuring least privilege access and compliance with RMF and NIST controls.

The position requires hands-on AWS experience, knowledge of Kubernetes, Git-based workflows, and scripting in PowerShell or Bash. A Secret clearance or eligibility within 6 months is expected.

Qualifications

• Active Secret clearance is required or must be able to obtain.
• Strong AWS security experience in cloud environments.
• Familiarity with NIST SP 800-53 controls and RMF processes.

Responsibilities

• Design, build, and maintain AWS infrastructure for CODIS in cloud environments.
• Implement security controls across cloud and OS layers.
• Create and manage IAM roles, policies, and least privilege access.
• Coordinate with CODIS dev and infra teams to keep environments stable.
• Support security assessments and document evidence for audits.
• Provide off-hours support for system upgrades and patching when needed.

Skills

AWS Security

Cloud Security

Scripting (PowerShell/Bash)

Threat & Risk Analysis

Tools

Kubernetes

Git

CloudFormation

IAM/VPC/EC2

Job description

Everforth ECS is seeking a AWS Cloud Security Engineer to work in our Stafford, VA (hybrid) office. The ECS Team provides focused Agile software development and maintenance for CODIS, a mission-critical application for the FBI. CODIS supports a database repository of DNA profiles from individuals, unsolved crime scene evidence, and missing persons. CODIS software allows local, state, and national laboratories to compare DNA profiles electronically, thereby linking serial crimes to each other and identifying suspects by matching DNA profiles from crime scenes to individuals' profiles.

Responsibilities

• Work in the Security & Infrastructure team for cloud-based development in AWS Design, build, and maintain AWS infrastructure supporting CODIS development ,test , pre-prod and prod environments, including EC2, IAM, VPC networking, security groups, and AMI lifecycle management.
• Provision and manage infrastructure through code using CloudFormation.
• Partner with the CODIS development and infrastructure teams to keep Dev and Test environments stable, current, and available to the sprint teams.
• Occasional need for off-hours support for system upgrades, patches and maintenance activities Implement and validate security settings across cloud infrastructure, operating system baselines, and application platforms.
• Provide AWS network and security support, including subnet and routing design, security group and NACL configuration, encryption in transit and at rest, KMS key management, and enterprise certificate and TLS trust management.
• Design and maintain least privilege IAM roles and policies, and remediate findings from IAM Access Analyzer, Security Hub, GuardDuty, and Config.
• Implement NIST SP 800-53 security controls in the cloud environment and document how each is satisfied, working within the NIST Risk Management Framework.
• Contribute technical content to ATO packages, including System Security Plan (SSP) narratives, control implementation statements, diagrams, and inventory artifacts.
• Support security assessments by producing evidence on request, responding to assessor questions, and driving Plan of Action and Milestones (POA&M) items to closure.
• Participate in Agile ceremonies, refine infrastructure and security stories, and provide realistic estimates to the sprint team.
• Troubleshoot environment and pipeline issues with precision, and document root cause and resolution so the fix is repeatable.

Salary Range

$100,000-$120,000

General Description of Benefits

• Active Secret clearance
• Demonstrated hands-on AWS experience administering EC2, IAM, VPC, and AMIs
• Practical experience implementing security settings and hardening across cloud and operating system layers.
• Working familiarity with NIST SP 800-53 controls and the RMF or ATO process, including contributing to security documentation, assessment evidence, or POA&M remediation on an accredited system.
• Experience working with Kubernetes and container images
• Experience using or managing Git-based version control across multiple projects
• Current Security+ certification or the ability to obtain within 6 months
• System Administration experience
• Strong attention to detail and solid troubleshooting ability
• Proficiency in scripting language(s), PowerShell or bash preferred
• Experience with security settings implementation