Cloud Security Engineer

GuidePoint Security; Reston (VA); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Remote workforce

Medical insurance

Dental insurance

Flexible time off

Retirement plan

Phone/internet allowance

Pet benefit

Job summary

GuidePoint Security in Reston, VA seeks a security engineer to support federal programs, evaluating cloud architectures, applying RMF and IA controls, and shaping secure solutions across on‑prem, cloud, and hybrid environments.

You will implement cloud security architectures, contribute to documentation such as SSPs and contingency plans, and work with IC clients to meet security requirements using modern tools and Agile practices.

Qualifications

• Must have a TS/SCI clearance with the ability to obtain a counter‑intelligence polygraph.
• 5+ years of experience building and administering cloud environments.
• Experience with security documentation (SSP, contingency plans, COOP).
• Experience with RMF and security architecture evaluations.
• Experience in an Agile development environment.
• Ability to obtain DoD 8570 certifications within 30 days of start date.
• Familiarity with infrastructure‑as‑code concepts (Terraform, CloudFormation, Bicep).

Responsibilities

• Evaluate and support documentation, validation, assessment, and accreditation for IT systems.
• Define desired state, risk thresholds, and assess compliance.
• Advise on doctrine and procedures to meet objectives and best practices.
• Evaluate applications to ensure software assurance practices are followed.
• Recommend tools and capabilities for on‑prem, cloud, and hybrid resources.
• Implement cloud security architectures and processes in collaboration with IC clients.

Skills

TS/SCI clearance

Cloud environments

RMF knowledge

Agile development experience

IaC: Terraform/CloudFormation/Bicep

Security architecture & documentation

Education

Associate degree + 5+ years IT

Bachelor's degree + 3+ years IT

Master's degree + 1+ year IT

Tools

Terraform

CloudFormation

Bicep

Job description

Overview

GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.

GuidePoint Security is a leading cybersecurity solutions and services firm enabling federal government organizations to make smarter security decisions that minimize risk. With more than 800 vetted technology vendor partnerships and deep practitioner expertise across every major cybersecurity domain, GuidePoint serves more than half of the U.S. Government's cabinet-level agencies across Civilian, DoD, and Intelligence Community segments, as well as Federal System Integrators and major defense prime contractors. We are growing our federal presales engineering team and looking for technically exceptional engineers who thrive at the intersection of federal mission and cybersecurity technology.

Responsibilities

As a security engineer on our team, you will evaluate and support the documentation, validation, assessment, and accreditation processes necessary to ensure that Information Technology (IT) systems meet the organization's Information Assurance (IA) and security requirements. You will assist in defining the organization’s desired state and risk thresholds and analyze actual state information to assess compliance. You will work with leaders to advise on codifying strategic objectives into doctrine and procedures that can help meet defined objectives. You will assist with evaluation of computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. You will recommend tools and capabilities based on research of the current environment and knowledge of various on-premises, cloud-based, and hybrid resources to address security requirements. You will implement the cloud security architectures, tools, and processes that you helped shape and define. Your technical experience will be vital as you work with IC clients to ensure standards are met with security requirements. This is an opportunity to use the latest cloud technologies while collaborating with tomorrow’s cloud security experts.

Requirements

• MUST have a TS/SCI clearance with the ability to obtain a counter‑intelligence polygraph.
• 5+ years of experience building and administering cloud environments, utilizing cloud‑native functionality, and COTS, GOTS, and open‑source tools to meet objectives.
• Experience with developing and evaluating security documentation, including system security plans, contingency plans, security procedures, and continuity of operations plans.
• Experience with security architecture evaluations, guidance development, and troubleshooting.
• Experience with the Risk Management Framework (RMF).
• Experience with working in an Agile development environment.
• Knowledge of infrastructure‑as‑code concepts such as Terraform, CloudFormation, or Bicep.
• Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ year of experience supporting IT projects and activities.
• Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP certification within 30 days of start date.
• Ability to obtain a DoD 8570 Cybersecurity Service Provider – Infrastructure Support Certification (CSSP‑IS), including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date.
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Qualifications

• Experience with the software development life cycle (SDLC).
• Experience with cloud technologies.
• Possession of excellent team leadership, development, and client relationship skills.
• Possession of excellent interpersonal skills.
• Possession of excellent verbal and written communication skills.

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on‑site may be required for Federal positions).
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees' premiums and 75% for family plans). If you choose the High Deductible/HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per employee annually / $1750 per family annually).
• Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.

Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information.