AWS Cloud Security Engineer: Secure, Automate & Scale

Booz Allen Hamilton; San Diego (CA); On-site; USD 69,000 - 158,000; Full time

Benefits offered by this job

Health benefits

Tuition assistance

Work-life programs

Paid leave

Professional development

Job summary

Booz Allen Hamilton is seeking an AWS Cloud Security Engineer to assess and strengthen security across large AWS environments, focusing on secure baselines, IaC, and automation. You will work with Organizations, IAM, VPCs, and security services to translate requirements into scalable engineering solutions.

You will collaborate with cloud platform teams and security stakeholders, delivering implementation-ready guidance and documentation to enable secure cloud adoption.

Qualifications

• 3+ years of experience with AWS cloud engineering, cloud security, infrastructure engineering, DevSecOps, site reliability engineering, or enterprise cloud delivery.
• Experience with AWS Organizations, organizational units, multi-account environments, IAM, roles, policies, Service Control Policies, or cross-account access.
• Experience with AWS networking, including VPCs, subnets, security groups, routing, Transit Gateway, private connectivity, DNS, load balancing, or ingress and egress controls.
• Experience with AWS security and monitoring services, including CloudTrail, AWS Config, GuardDuty, Security Hub, KMS, IAM Access Analyzer, CloudWatch, Systems Manager, or AWS Inspector
• Experience developing or reviewing Terraform, AWS CloudFormation, or Infrastructure as Code used to deploy and manage AWS resources.
• Experience in assisting with developing cloud security standards, secure configuration baselines, technical guardrails, policies, or reusable security patterns
• Experience with scripting or automation using Python, Bash, PowerShell, AWS CLI, SDKs, APIs, or engineering tools
• Experience assessing technical environments, identifying security or architecture gaps, and translating findings into practical recommendations, implementation steps, or technical documentation
• Ability to work directly with cloud engineers, architects, cybersecurity teams, application teams, governance stakeholders, and client leadership

Responsibilities

• Assess cloud security posture and identify gaps in AWS environments.
• Review AWS Organizations, landing zones, IAM, and networking for secure configurations.
• Develop Terraform/IaC and guardrails; create technical documentation.
• Collaborate with cloud architects, security engineers, and stakeholders to implement secure patterns.
• Translate security findings into practical recommendations and steps.

Skills

AWS cloud engineering

cloud security

Terraform

Infrastructure as Code

Python

Bash

AWS CLI

security assessments

communication with stakeholders

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or Information Systems

Tools

Terraform

AWS CloudFormation

Job description

Booz Allen Hamilton is seeking an AWS Cloud Security Engineer to assess and strengthen security across large AWS environments, focusing on secure baselines, IaC, and automation. You will work with Organizations, IAM, VPCs, and security services to translate requirements into scalable engineering solutions.

You will collaborate with cloud platform teams and security stakeholders, delivering implementation-ready guidance and documentation to enable secure cloud adoption.