Cloud Security Engineer

VulnU; Linthicum (MD); On-site; USD 135,000 - 216,000; Full time

Benefits offered by this job

25 days PTO

Job summary

Peraton in Linthicum, MD is seeking a Cloud Security Engineer to secure cloud deployments for a DoD customer. You will apply RMF, STIGs, and continuous ATO practices, design hardened cloud architectures, and integrate security tooling into CI/CD pipelines.

The role emphasizes threat analysis, forensics support, and secure cloud operations. The ideal candidate has extensive cloud security experience, strong knowledge of IAM, Kubernetes, and monitoring, and a TS/SCI clearance; remote work is

Qualifications

• Experience planning, building, hardening, and managing secure cloud environments.
• Ability to assess and implement cybersecurity controls across cloud infrastructure, apps, networks, and data-management components.
• Experience with RMF, STIGs, ATO/Continuous ATO processes, and security documentation.

Responsibilities

• Support secure cloud migrations in AWS and Azure.
• Configure and maintain vulnerability scanning, remediation tracking, and monitoring tools.
• Integrate cybersecurity tooling into CI/CD pipelines used by development teams.
• Assist in maintaining logging, monitoring, and alerting for cloud environments.

Skills

Cloud security

RMF & STIGs

AWS & Azure

CI/CD security

Kubernetes security

IAM & least privilege

Vulnerability management

Linux scripting

Git & CI tools

Education

10+ years IT security experience

Bachelor's degree or higher

Tools

AWS, Azure

Kubernetes

Terraform/Ansible

GitLab CI

Job description

# Cloud Security EngineerPeraton · peraton.comCategory: Cloud SecurityLocation: Linthicum, MDSalary: $135,000 – $216,000Clearance: TS/SCI## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* 25 days PTOResponsibilitiesPeraton is seeking a Cloud Security Engineer in our Linthicum, MD office in support of our Department of Defense (DoD) customer as part of a highly talented, highly motivated, and high-performing team. This position offers a unique opportunity to work at the forefront of cyber investigations, digital forensics, cyber threat analysis, and mission support in a dynamic and collaborative environment. The successful candidate will contribute to protecting national security interests by leveraging technical expertise, analytical skills, and innovative problem-solving to address complex cyber challenges. Individuals who are passionate about cybersecurity, committed to excellence, and eager to make a meaningful impact are encouraged to apply.This Cloud Security Engineer is needed to assist in the planning, building, management, and continuous security improvement of the DC3 Cloud Environment in support of a Department of War customer. The position supports mission-focused cybersecurity activities, including cloud security engineering, cyber threat analysis, digital forensics support, and protection of national-security systems and data.The Cloud Security Engineer will address the cybersecurity of cloud deployments by ensuring that cloud design, configuration, implementation, data controls, monitoring, logging, networking, storage, and overall architecture comply with applicable Department of War regulations, the Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and other applicable security requirements.The engineer will configure, integrate, and maintain tools that identify, scan, prioritize, and remediate vulnerabilities in production deployments and Continuous Integration/Continuous Delivery (CI/CD) pipelines. The position will apply appropriate cybersecurity controls and collaborate with cloud architecture, development, operations, and security teams to ensure cloud environments are properly designed, hardened, monitored, and secured throughout the system lifecycle.ResponsibilitiesSupport the planning, design, implementation, hardening, and management of secure cloud environments.Assess and implement cybersecurity controls across cloud infrastructure, applications, networks, storage, identity services, and data-management components.Ensure cloud deployments comply with applicable Department of War cybersecurity requirements, RMF controls, STIGs, and security best practices.Support Authorization to Operate (ATO) and Continuous ATO activities, including development and maintenance of required security documentation and evidence.Configure and maintain tools for vulnerability scanning, assessment, remediation tracking, and continuous monitoring.Integrate cybersecurity tooling into CI/CD pipelines used by development teams to deploy cloud-based solutions.Support secure AWS cloud migration activities.Implement and maintain cloud logging, monitoring, alerting, observability, and security-information capabilities.Collaborate with architecture and engineering teams to secure cloud networking, storage, Kubernetes environments, containers, and infrastructure-as-code deployments.Support identity and access management (IAM), least-privilege access, authentication, authorization, and privileged-access security controls.Apply risk-analysis methods and best practices to determine the scope, severity, and treatment of identified cybersecurity risks.QualificationsRequired QualificationsProficiency in cybersecurity principles and technologies, including firewalls, intrusion detection systems (IDS), and security information and event management (SIEM) platforms.Knowledge of RMF, STIGs, ATO and Continuous ATO processes, associated documentation, and risk-scoping best practices.Experience with cloud platforms, including AWS and Azure.Experience supporting AWS cloud migrations.Knowledge of cloud networking, storage, architecture, data controls, monitoring, and logging.Experience with cloud observability toolsets.Understanding of version-control systems, including Git, and their integration with CI tools such as GitLab CI.Experience configuring and integrating cybersecurity tools within CI/CD pipelines.Familiarity with Kubernetes environments, container security, and Kubernetes package-management tools such as Helm.Basic understanding of Linux administration and programming or scripting languages, including Java, Python, and C#.Understanding of infrastructure and configuration as code tools, including Ansible and Terraform.Experience with IAM solutions, including Azure Entra ID, AWS IAM, and Keycloak.Active Top Secret clearance with SCI eligibility.Education & Experience RequirementsMinimum of 10 years with AS/AA; Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD. However, four (4) years of additional experience can be considered in lieu of a Bachelor’s degree.Required CertificationActive CompTIA Security+ certification — must remain current.Preferred CertificationsCandidates should possess one or more of the following preferred certifications:AWS Certified Security – Specialty(ISC)2 Certified Cloud Security Professional (CCSP)CompTIA SecurityX/CASP+Certified Information Systems Security Professional (CISSP)CISSP–Information Systems Security Engineering Professional (CISSP-ISSEP)Microsoft Certified: Azure Security Engineer Associate (AZ-500)CISSP–Information Systems Security Architecture Professional (CISSP-ISSAP)Microsoft Certified: Azure Fundamentals (AZ-900)Peraton OverviewPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.Target Salary Range$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.