Cloud Security Architect: AWS, IAM & Zero‑Trust Expert

Steampunk; McLean (VA); On-site; USD 130,000 - 180,000; Full time

Job summary

Steampunk is seeking a Senior Cloud Security Engineer to design, implement, and maintain secure AWS cloud environments across the system lifecycle. You will lead security controls, IAM, vulnerability management, data protection, and continuous monitoring in collaboration with DevSecOps and cybersecurity teams.

The role requires strong hands-on AWS security, risk assessment, and threat modeling experience, plus ability to mentor juniors and work within federal contracting contexts.

Qualifications

• Bachelor's degree and 10+ years of total experience.
• 5+ years of experience architecting, designing, developing, implementing, or securing cloud solutions.
• 5+ years of experience with cloud platforms, including AWS.
• Experience implementing cloud security architecture, controls, and security best practices in AWS environments.
• Experience with Cloud-Native Application Protection Platform (CNAPP) or Cloud Security Posture Management (CSPM) solutions.
• Experience with identity and access management (IAM), authentication, authorization, and least-privilege security principles in cloud environments.
• Experience identifying, assessing, tracking, and supporting remediation of cloud vulnerabilities and security misconfigurations.
• Experience conducting security monitoring, risk assessments, threat modeling, and security testing in cloud environments.
• Experience implementing or supporting continuous security monitoring and vulnerability management processes.
• Experience with infrastructure as code and orchestration.
• Experience analyzing technical security findings and identifying appropriate remediation or risk mitigation actions.
• Experience collaborating across cloud, DevSecOps, software engineering, and cybersecurity teams to implement and maintain security controls.
• Strong analytical, troubleshooting, problem-solving, communication, and collaboration skills.
• Current AWS certification.

Responsibilities

• Design and implement secure cloud architectures and technical solutions with security requirements incorporated throughout the system lifecycle.
• Identify and implement secure cloud-based solutions, including components supporting zero-trust architectures, identity and access management, and data protection.
• Implement and maintain IAM controls, including authentication, authorization, and least-privilege access.
• Assess and harden cloud environments, configurations, authentication mechanisms, and authorization controls.
• Identify, assess, document, and track vulnerabilities and cloud security risks across systems and environments.
• Partner with cloud engineers, software engineers, DevSecOps engineers, cybersecurity teams, and other stakeholders to prioritize and remediate vulnerabilities and security weaknesses.
• Implement and support cloud security posture and application protection to identify misconfigurations, vulnerabilities, and excessive permissions.
• Monitor cloud environments for suspicious activity using cloud-native monitoring, SIEM, and other security solutions and investigate events.
• Conduct risk assessments, threat modeling, and security testing to identify and mitigate cloud security risks.
• Automate security processes, including vulnerability management and configuration assessment.
• Support enterprise cloud security through infrastructure as code and large-scale deployments.
• Evaluate infrastructure as code and cloud configurations for security risks and remediation.
• Design and implement data protection and encryption mechanisms for data at rest and in transit.
• Document the as-is state of cloud environments, perform gap analyses, and produce options and recommendations.
• Evaluate changes for security impacts.
• Provide technical guidance and mentorship to junior team members.
• Engineer and implement cloud security solutions and provide recommendations for continuous improvement.
• Present regular status updates and cross-train team members.
• Maintain awareness of evolving cloud vulnerabilities, threats, security technologies, and practices.

Skills

Cloud security

AWS

IAM

Vulnerability management

Security monitoring

Threat modeling

Automation

Infrastructure as code

Scripting (Bash/PowerShell/Python)

Team collaboration

Communication

Education

Bachelor's degree

Tools

CNAPP

CSPM

Wiz

Palo Alto Cortex

Terraform

CloudFormation

Ansible

Job description

Steampunk is seeking a Senior Cloud Security Engineer to design, implement, and maintain secure AWS cloud environments across the system lifecycle. You will lead security controls, IAM, vulnerability management, data protection, and continuous monitoring in collaboration with DevSecOps and cybersecurity teams.

The role requires strong hands-on AWS security, risk assessment, and threat modeling experience, plus ability to mentor juniors and work within federal contracting contexts.