AWS Cloud Security Engineer: IAM, IaC & Threat Defense

Staterallc; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

Statera Systems Solutions LLC is seeking an AWS Security Engineer to design, implement, and maintain secure AWS architectures. The role focuses on strengthening cloud security posture, implementing preventative and detective controls, and ensuring regulatory compliance. Onsite, full-time in a DC-area setting.

The ideal candidate has hands-on AWS security experience, knowledge of STIGs, and the ability to work with DevOps to secure CI/CD pipelines.

Qualifications

• Active Security Clearance
• 3+ years of cloud/infrastructure security experience
• Strong STIG hardening knowledge and remediation skills
• Hands-on experience with AWS security services and architecture
• Understanding of IAM, encryption (KMS), and key management best practices
• Experience with AWS network security (VPCs, routing, firewalls)
• Scripting in Python or Bash
• IaC with Terraform or AWS CDK Python
• Familiarity with NIST 800-53, RMF, CIS Benchmarks, FedRAMP

Responsibilities

• Design and implement secure AWS architectures aligned with best practices
• Configure IAM policies, roles, and permissions using least privilege
• Manage AWS security services such as GuardDuty, Security Hub, Inspector, Macie, WAF
• Develop infrastructure security controls using IaC (Terraform, AWS CDK Python)
• Perform threat modeling, risk assessments, and remediation
• Implement logging/monitoring with CloudTrail, CloudWatch, and SIEMs
• Participate in cloud incident response activities
• Automate security checks and compliance validation across AWS environments
• Collaborate with DevOps to embed security in CI/CD (DevSecOps)
• Respond to RFIs

Skills

AWS security services

IAM & KMS

Terraform

Python scripting

Cloud security architecture

VPC networking

Bash scripting

DevSecOps

Threat modeling

Compliance frameworks

Education

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field

Tools

AWS CDK

Terraform

CloudTrail

SIEM tooling

Job description

Statera Systems Solutions LLC is seeking an AWS Security Engineer to design, implement, and maintain secure AWS architectures. The role focuses on strengthening cloud security posture, implementing preventative and detective controls, and ensuring regulatory compliance. Onsite, full-time in a DC-area setting.

The ideal candidate has hands-on AWS security experience, knowledge of STIGs, and the ability to work with DevOps to secure CI/CD pipelines.