Cloud Security Engineer

Nava; San Antonio (TX); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical and dental insurance

Disability insurance

Vision insurance

401k with company match

Paid leave and holidays

Tuition and training reimbursement

Life and AD&D Insurance

Job summary

AnaVation is seeking a Cloud Security Engineer to lead zero-trust engineering and cloud security modernization in our San Antonio office. You will manage cloud security, design and deploy AWS architecture with Terraform and Ansible, and support SIEM/SOAR, incident response, and RMF/cATO readiness.

This role requires TS/SCI clearance and 10+ years of experience. You will collaborate with ISSMs/ISSEs and government stakeholders to advance automation, IAM controls, and secure cloud infrastructure

Qualifications

• U.S. Citizen with TS/SCI and CI Polygraph
• Bachelor’s degree in Cybersecurity/CS/IT or related field
• DoD 8140/8570 IAT Level II and AWS certification
• On-site, full-time in San Antonio, TX
• 10+ years of relevant experience in cloud security and RMF/ATO processes
• Experience with AWS, networking (VPC, subnets), and IaC security tooling
• Experience with SIEM/SOAR, and security automation

Responsibilities

• Lead zero-trust engineering and cloud security modernization.
• Design, implement, and maintain AWS architecture with Terraform and Ansible.
• Administer AWS and cloud services, apply advanced networking and IAM controls.
• Support SIEM/SOAR, IMS, and incident response roadmaps.
• Architect logging/telemetry and integrate with CSSP delivery.
• Advance security automation and automated evidence collection.
• Collaborate with government stakeholders and DevSecOps teams.
• Maintain documentation and support cATO readiness.
• Integrate ICAM and enforce Zero Trust across mission environments.

Skills

Zero trust engineering

Cloud security

SRE

Security automation

Incident response leadership

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

AWS

Terraform

Ansible

GitLab CI

Kubernetes

Docker

Linux

Job description

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed:

AnaVation is seeking a Cloud Security Engineer to support one of ourcybersecurity programs in our San Antonio office. In this position, the right candidate will lead zero trust engineering,interoperability, and modern security capability development across the Government enterprise. The Cloud SecurityEngineer will manage security systems and tools for cloud technologies, investigate and enhance existing cloudstructures, and drives issue identification/resolution, integration, gap assessment, and continuous improvement, whileproviding flexible reach-back across the Government’s Cyber Assessment Roadmap.

Position Responsibilities:

This position sets the engineering direction for the Government’s zero trust and cloud securitymodernization, translating roadmap objectives into deployed, measurable capability.

Responsibilities include:

• Lead zero trust engineering and interoperability initiatives, future-proofing implementations as tools and requirementsevolve.
• Design, implement, and maintain AWS cloud architecture using Terraform (including custom modules) and Ansible.
• Administer relevant cloud infrastructure-level consoles (e.g., AWS) and secure cloud services and accounts; applyadvanced networking, VPC, peering, and subnet design.
• Support the SIEM, SOAR, Incident Management System (IMS), and Incident Response Team (IRT) roadmap,engineering, and integration.
• Architect logging, monitoring, and telemetry, coordinating delivery with the Cyber Security Service Provider (CSSP).
• Advance security automation and automated evidence collection to increase inheritance and continuous monitoring maturity.
• Provide flexible SME support and reach-back across DevSecOps automation, supply chain security, enterprise vulnerability management, and AI.
• Provide updates to the Cyber Assessment Roadmap; create/maintain documentation and brief technical and non-technical stakeholders.
• Collaborate with ISSMs, ISSEs, Value Stream engineers, COT, CPT, and Government stakeholders using tools like git.
• Support Zero Trust enforcement, cloud security controls, and Infrastructure as Code security across mission environments.
• Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness.
• Architect and integrate an enterprise SIEM ingesting logs from AWS (VPC, EKS, CloudTrail), Okta, Istio, GitLab, and host logs (systemd, audit), with dashboards for runtime monitoring, defense, and forensics.
• Enforce Zero Trust through ICAM integration and micro-segmentation validation and manage enterprise security tooling.

Required Qualifications:

• Clearance: U.S. Citizen, current TS/SCI; current CI Polygraph
• Education: Bachelor's degree in Cybersecurity, Computer Science, Cloud Computing, IT, or related technical field.
• Certification: DoD 8140/8570 IAT Level II and an AWS certification.
• Location: Full-time on-site in San Antonio, TX.
• Experience and knowledge:
  • Subject Matter Expert: provides technical and management leadership on major tasks; domain and expert technicalknowledge; decisions may have critical project impact; may lead others.
  • Highly experienced with AWS; advanced networking, VPC, peering, and subnet experience.
  • GitLab CI experience; Terraform experience including writing custom modules and collaboration at scale; Ansibleexperience.
  • Proficient in Linux; SRE experience for a mid-to-large enterprise system.
  • Designing, implementing, and maintaining AWS cloud architecture; creating/maintaining implementationdocumentation.
  • Experience supporting RMF, ATO, cATO, and continuous monitoring; SIEM and security automation (familiaritywith SOAR/IMS).
  • Minimum years of experience - 10 years of relevant experience.

Preferred Qualifications:

• Clearance: Active TS/SCI
• Education: Advanced degree in a related technical field.
• Certification: AWS Certified Security - Specialty, CCSP, CISSP, CKS, or CKA.
• Experience and Knowledge:
  • General cloud architecture experience with Azure or GCP (a plus, not required); experience with Kubernetes andDocker.
  • Knowledge of SQL databases and coding skills (Java, Python, Go, C++); microservices architectures.
  • Security framework experience (RMF, DISA STIG, CIS Benchmarks); software engineering background.
  • Experience engineering SOAR/IMS and supporting Incident Response Teams (IRT); applying AI/ML to securityautomation.
  • Experience supporting software factory environments (Iron Bank, Big Bang); IL4/IL5/IL6 cloud environments.

Benefits

• Generous cost sharing for medical insurance for the employee and dependents
• 100% company paid dental insurance for employees and dependents
• 100% company paid long-term and short-term disability insurance
• 100% company paid vision insurance for employees and dependents
• 401k plan with generous match and 100% immediate vesting
• Competitive Pay
• Generous paid leave and holiday package
• Tuition and training reimbursement
• Life and AD&D Insurance

About AnaVation

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.

If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.