AWS GovCloud Security Engineer for cATO & FedRAMP

TrekFed; United States; Hybrid; USD 140,000 - 190,000; Full time

Job summary

TrekFed is seeking a highly skilled AWS GovCloud Security Engineer to secure and maintain cloud infrastructure supporting continuous authorization (cATO) in classified environments. You will perform hands-on cloud security engineering, boundary protection, vulnerability management, STIG/SRG assessments, patching, and POA&Ms tracking in line with NIST 800-53 and FedRAMP.

You will triage findings, review infrastructure-as-code changes for security impacts, coordinate incident response across

Qualifications

• Ability to quickly secure Secret security clearance.
• Experience working in classified environments and handling classified information.
• Applying secure coding practices and documentation standards.
• Collaborating with cross-functional teams and vendors to define, design, and deploy features.
• Demonstrated experience securing AWS cloud infrastructure including IAM, networking, logging, and boundary protection.
• Hands-on experience with infrastructure vulnerability management, patching, STIG/SRG assessments, SCAP results, and POA&Ms tracking.
• Experience with security incident triage and coordination across infrastructure, application, and Government security teams.
• Ability to review infrastructure-as-code and configuration changes for security impacts.
• Demonstrated proficiency with AWS GovCloud environments and native security services.

Responsibilities

• Operate and maintain cloud boundary protection capabilities, including perimeter controls, segmentation, security logging, and monitoring.
• Perform infrastructure vulnerability assessments, configuration reviews, hardening, patching, and remediation validation against STIG/SRG/cATO requirements.
• Maintain infrastructure POA&Ms and track findings through remediation or approved disposition within cATO timelines.
• Produce and maintain infrastructure authorization evidence including boundary diagrams, dataflows, inventories, controls, STIG/SRG/SCAP results, patch records, and continuous monitoring records.
• Review security impacts of landing-zone, identity and access, network, and infrastructure-as-code changes; coordinate security requirements at cross-domain interfaces.
• Implement and document security controls aligned with NIST 800-53 and FedRAMP compliance requirements, supporting continuous authorization across cloud environments.

Job description

TrekFed is seeking a highly skilled AWS GovCloud Security Engineer to secure and maintain cloud infrastructure supporting continuous authorization (cATO) in classified environments. You will perform hands-on cloud security engineering, boundary protection, vulnerability management, STIG/SRG assessments, patching, and POA&Ms tracking in line with NIST 800-53 and FedRAMP.

You will triage findings, review infrastructure-as-code changes for security impacts, coordinate incident response across