AWS Security Engineer

PlanIT Group; Raleigh (NC); Remote; USD 110,000 - 140,000; Full time

Job summary

A technology consulting firm is seeking an AWS Security Engineer to support federal customers. The role requires extensive cybersecurity experience and knowledge of NIST 800-53 controls. Responsibilities include designing security controls in AWS, conducting risk analyses, and collaborating with stakeholders on compliance. Candidates must be US citizens or permanent residents, with the ability to obtain a Public Trust Clearance.

Qualifications

• 7+ years of cybersecurity experience, including at least 3+ years in cloud environments.
• Hands-on experience implementing and assessing NIST 800-53 controls in a federal cloud context.
• Experience with performing ISSO responsibilities within federal government programs.

Responsibilities

• Design and implement security controls in AWS environments.
• Lead security authorization efforts by preparing System Security Plans.
• Conduct vulnerability scans and security assessments using tools like Nessus.

Skills

Cybersecurity experience

Cloud environments

NIST 800-53 controls

Scripting in Python, Bash, or PowerShell

DevOps tools (Jenkins, CodePipeline)

Linux / Windows server environment

Cloud-native logging and monitoring

Familiarity with AI cloud tooling

Job description

Overview

PlanIT Group is seeking an AWS Security Engineer to support our Federal customer in the Washington, DC area. The ideal candidate will have 7+ years of cybersecurity experience, including at least 3+ years in cloud environments. Hands-on experience implementing and assessing NIST 800-53 controls in a federal cloud context.

Job Title

AWS Security Engineer

Location

Remote

Start Date

07 / 21 / 25

Duration

One year plus annual extensions

Responsibilities

• Design and implement security controls in AWS environments using services such as IAM, KMS, CloudTrail, Security Hub and Config.
• Lead or support security authorization efforts (FedRAMP, FISMA) by preparing and maintaining System Security Plans (SSPs), POA&Ms, Contingency Plans, and other artifacts.
• Conduct vulnerability scans, security assessments, and risk analyses using tools like Nessus or AWS Security Hub.
• Serve as the security POC and collaborate with stakeholders to ensure systems remain compliant with NIST 800-53 and agency specific policies.
• Monitor cloud environments for anomalous activity, enforce access control policies, and support incident response efforts.
• Review and advise on DevSecOps practices, including secure CI / CD pipelines, automate compliance checks, and secure container usage.
• Coordinate with the AO, ISSM, and SOC teams to manage system risk posture and track remediation activities.

Qualifications

• 7+ years of cybersecurity experience, including at least 3+ years in cloud environments.
• Hands-on experience implementing and assessing NIST 800-53 controls in a federal cloud context.
• Experience with cloud-native logging, monitoring, and SIEM integration.
• Experience with performing ISSO responsibilities within federal government programs.
• Strong scripting experience in Python, Bash, or PowerShell.
• Strong experience with DevOps tools such as Jenkins or CodePipeline.
• Proficiency with Linux / Windows server environment and cloud networking concepts (DNS, VPC, VPN, etc.)
• Familiarity / experience with artificial intelligence (AI) cloud tooling is a huge plus (Amazon BedRock, Lex, Comprehend, etc.)

Additional Provisions

• Must be able to obtain a Public Trust Clearance
• Pass both a client mandated clearance process to include drug screening, criminal history check and credit check.
• All candidates must be a US Citizen or US Permanent Resident.
• Candidate must have lived in the United States for the past 5 years.
• Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)