AWS Cloud Security Engineer - Cleared

Statera Systems Solutions LLC; Washington (District of Columbia); On-site; USD 120,000 - 190,000; Full time

Job summary

Statera Systems Solutions LLC is seeking an AWS Security Engineer to design, implement, and maintain secure cloud architectures in AWS. The role focuses on strengthening cloud security posture, implementing preventative and detective controls, and ensuring regulatory compliance.

The position is 100% onsite and full-time, with standard office hours Monday through Friday. The ideal candidate has hands-on experience with AWS security services and a strong security engineering mindset.

Qualifications

• Active security clearance is required.
• Bachelor’s degree or equivalent experience in a related field.
• 3+ years of cloud or infrastructure security experience.
• Strong understanding of STIG hardening and vulnerability remediation.
• Hands-on experience with AWS security services and architectures.
• Familiarity with IAM, encryption (KMS), and key management best practices.
• Experience with network security in AWS (VPCs, routing, firewalls).
• Scripting skills in Python or Bash; IaC with Terraform or CDK.

Responsibilities

• Design and implement secure AWS architectures aligned with best practices.
• Configure IAM policies, roles, and boundaries using least-privilege.
• Manage security services like GuardDuty, Security Hub, Inspector, Macie, and WAF.
• Develop infrastructure security controls with Terraform or CDK Python.
• Conduct threat modeling, risk assessments, and remediation.
• Implement logging/monitoring with CloudTrail, CloudWatch, and SIEM.
• Contribute to incident response for cloud security events.
• Automate security checks and compliance validation across AWS.
• Collaborate with DevOps to integrate security into CI/CD (DevSecOps).
• Respond to RFIs as needed.

Skills

AWS security

Python scripting

Bash scripting

IAM & least privilege

Infrastructure as Code

Vulnerability management

STIG hardening

Cloud security

Regulatory compliance

Education

Bachelor’s degree in CS / Cybersecurity / Engineering

Tools

Terraform

AWS CDK

AWS GuardDuty

AWS Security Hub

AWS Inspector

Amazon Macie

WAF

Job description

Description

Triple-S is seeking a skilled AWS Security Engineer to design, implement, and maintain secure cloud architectures within AWS. This role is responsible for strengthening cloud security posture, implementing preventative and detective controls, and ensuring compliance with organizational and regulatory requirements. The ideal candidate combines deep AWS technical knowledge with a strong security engineering mindset.

The position is 100% onsite and full-time, Monday-Friday with standard office hours.

Key Responsibilities

• Design and implement secure AWS architectures aligned with security best practices
• Configure and manage IAM policies, roles, and permission boundaries using least-privilege principles
• Implement and manage security services such as AWS GuardDuty, Security Hub, Inspector, Macie, and WAF
• Develop and maintain infrastructure security controls using Infrastructure as Code (Terraform, AWS CDK Python)
• Perform threat modeling, risk assessments, and vulnerability remediation
• Implement logging, monitoring, and alerting strategies using CloudTrail, CloudWatch, and centralized SIEM solutions
• Participate in incident response efforts for cloud-related security events
• Automate security checks and compliance validation across AWS environments
• Collaborate with DevOps and engineering teams to embed security into CI/CD pipelines (DevSecOps)
• Responding to RFIs

Requirements

• Must possess an active Security Clearance
• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)
• 3+ years of experience in cloud security or infrastructure security
• Strong understanding of STIG hardening, vulnerability scanning, and remediation processes
• Strong hands‑on experience with AWS security services and architecture
• Understanding of IAM, encryption (KMS), and key management best practices
• Experience with network security in AWS (VPCs, routing, firewalls)
• Proficiency in scripting languages (Python, Bash)
• Experience with Infrastructure as Code (Terraform or AWS CDK Python)
• Understanding of compliance frameworks such as NIST 800‑53, RMF, CIS Benchmarks, and FedRAMP

Desired Qualifications

• Experience with STIG hardening
• Experience with container security (EKS, ECS, image scanning)
• Knowledge of identity federation (SSO, SAML, OIDC)
• Experience integrating AWS logs with SIEM platforms
• Familiarity with Zero Trust architecture principles
• AWS certifications (AWS Certified Security – Specialty, Solutions Architect, etc.)
• Security certifications (CISSP, CISM, CEH, or Security+)

Equal Employment Opportunity

Statera Systems Solutions LLC is an Equal Employment Opportunity/Affirmative Action employer. We are committed to fostering an inclusive workplace and providing equal employment opportunities to all qualified applicants, without regard to race, color, religion, sex, pregnancy, sexual orientation, or any other status protected by applicable law.