AWS Cloud Security & Guardrails Engineer — On-Site

VSO Inc.; Washington (District of Columbia); On-site; USD 140,000 - 200,000; Full time

Job summary

VSO Inc. seeks an experienced AWS Cloud Security & Guardrails Engineer to shape security architecture for mission-critical cloud platforms.

You will translate requirements into practical identity, encryption, and observability guardrails that engineering teams can build on with confidence. This on-site role requires active TS/SCI clearance, 5+ years in engineering including 3+ years in AWS, and strong knowledge of IAM, KMS, logging, and secure deployment practices.

Qualifications

• 5+ years in engineering, including 3+ years of hands-on AWS experience.
• Strong AWS IAM, KMS, logging, and cloud security architecture knowledge.
• Experience reviewing technical implementations against security requirements.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.

Responsibilities

• Design and improve AWS IAM policies, encryption controls, and centralized logging patterns.
• Review cloud architectures and infrastructure code for security risks.
• Support security assessment documentation and evidence collection.
• Partner with engineering teams to embed reusable security guardrails in deployment workflows.

Skills

AWS IAM

KMS

Logging

Security architecture

Policy review

Tools

Terraform/IaC

Job description

VSO Inc. seeks an experienced AWS Cloud Security & Guardrails Engineer to shape security architecture for mission-critical cloud platforms.

You will translate requirements into practical identity, encryption, and observability guardrails that engineering teams can build on with confidence. This on-site role requires active TS/SCI clearance, 5+ years in engineering including 3+ years in AWS, and strong knowledge of IAM, KMS, logging, and secure deployment practices.