Cloud Security Engineer

Koniag Services, Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401K with company matching

Flexible spending accounts

Paid holidays

3 weeks paid time off

Job summary

Koniag Technology Solution, a Koniag Government Services company, seeks an experienced Cloud Security Engineer to join our team supporting cloud security architecture, implementation, and continuous monitoring across AWS, Azure, and GCP for federal government customers. Active Secret clearance is required.

The role focuses on designing secure cloud environments, implementing security controls, documenting A&A artefacts, and collaborating with cross-functional teams to reduce risk and meet

Qualifications

• Bachelor's degree or higher in a related IT/security field.
• 5+ years of IT/security experience in engineering/operations.
• FISMA, FedRAMP, and NIST SP 800-53 knowledge.
• Active Secret clearance or higher.

Responsibilities

• Design security solutions across AWS, Azure, and GCP to meet regulatory controls.
• Install, configure, and test cloud-native security services and third-party tools.
• Leverage native cloud security services and identify gaps requiring additional tools.
• Manage security tools including Qualys, Tripwire, and Splunk.
• Develop and maintain security operation processes and SSPs/AA artifacts.
• Support A&A documentation and assessment activities.
• Perform continuous monitoring and security impact assessments in cloud environments.
• Collaborate with cross-functional teams to align security with operations.

Skills

Cloud security

AWS

Azure

GCP

Security architecture

Vulnerability management

SIEM (Splunk)

OS hardening

A&A documentation

English communication

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field

Master's degree in Information Systems or Cybersecurity

Tools

Qualys

Tripwire

Splunk

AWS Config

Azure Security Center

GCP Security Command Center

Job description

Posted Friday, August 21, 2026 at 4:00 AM

Koniag Technology Solution, a Koniag Government Services company, is seeking an experienced Cloud Security Engineer to join a dynamic team supporting cloud security architecture, implementation, and continuous monitoring across multiple cloud platforms. The ideal candidate is a technically proficient security professional with hands-on experience securing environments across Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). This individual will be passionate about cybersecurity, committed to staying current with evolving threats and technologies, and capable of applying their expertise to solve complex, real-world security challenges in a federal government context. The ability to obtain or maintain an active Secret clearance is required to support our government customer.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

The Cloud Security Engineer will be responsible for the security aspects of cloud system design, security tool and service analysis and selection, and subsequent implementation across AWS, Microsoft Azure, and Google Cloud Platform (GCP). This individual will configure tools and services to meet the business requirements, policy mandates, and security risk tolerance of our government customers. The Cloud Security Engineer will also document how required security controls are satisfied through cloud service and tool implementations to support Assessment and Authorization (A&A) activities.

Principal responsibilities will include but are not limited to:

• Engineer and design security solutions across cloud platforms including AWS, Microsoft Azure, and GCP that manage risk and meet relevant security regulations, controls, and policies.
• Implement security designs by installing, configuring, and testing cloud-native services, associated third-party services, and security software across multi-cloud environments.
• Determine how to effectively leverage native security services from cloud providers and identify gaps that must be addressed through additional tools, software, or third-party services.
• Implement and manage security tools and services including OS hardening, cloud-native security features (e.g., AWS Config, Azure Security Center, GCP Security Command Center), vulnerability management tools such as Qualys, intrusion detection tools such as Tripwire, and SIEM solutions such as Splunk.
• Develop and maintain processes and procedures for the operation and use of implemented security tools and services.
• Prepare Assessment and Authorization (A&A) documentation including System Security Plans (SSPs), security control worksheets, and other supporting artifacts.
• Participate in the assessment of system security controls to validate proper implementation and identify weaknesses or gaps in compliance posture.
• Perform continuous monitoring of cloud environments using implemented solutions and tools to detect and respond to security events.
• Conduct security impact assessments of proposed changes to cloud environments to identify adverse shifts in security risk posture or compliance standing.
• Identify new and innovative ways to leverage existing toolsets to automate security management, monitoring, and related processes in order to reduce risk and operational costs.
• Collaborate with cross-functional technical teams, system owners, and business analysts to reconcile security requirements with operational needs.
• Contribute to technical documentation including architecture diagrams, security design documents, and detailed data flows.

Education and Experience :

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related IT or security field from an accredited college or university.
• 5+ years of professional experience in IT/network engineering, security engineering, system administration, or security operations.
• Demonstrated experience with FISMA, FedRAMP, and NIST SP 800-53 security frameworks and control families.
• Active Secret security clearance or higher.

Required Skills and Competencies:

• Exceptional analytical skills with strong verbal and written communication abilities in English, with the capacity to communicate effectively with both technical and non-technical stakeholders.
• Demonstrated ability to work independently as a self-starter while also functioning effectively as a collaborative team member.
• Hands-on experience engineering and implementing security solutions across two or more major cloud platforms, including AWS, Microsoft Azure, and/or GCP.
• Proficiency in configuring and operating cloud-native security services such as AWS Config, AWS Security Hub, Azure Defender/Security Center, Azure Policy, and/or GCP Security Command Center.
• Experience implementing and managing security tools including vulnerability management platforms (e.g., Qualys), host-based intrusion detection (e.g., Tripwire), and SIEM platforms (e.g., Splunk).
• Experience with OS hardening techniques and implementation of security baselines across cloud-hosted systems.
• Familiarity with preparing and maintaining Assessment and Authorization (A&A) documentation including System Security Plans (SSPs) and security controls worksheets.
• Experience performing continuous monitoring and security impact assessments within cloud environments.
• Knowledge of identity and access management (IAM) principles and implementation across cloud platforms.
• Ability to identify opportunities to automate security processes and monitoring to reduce risk and operational overhead.
• Strong initiative and ability to present ideas and solutions to overcome technical and organizational security challenges.

Desired Skills and Competencies:

• Active security certifications such as CISSP, CISM, CISA, CEH, CCSK, CCSP, AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Professional Cloud Security Engineer.
• Experience working in a federal government IT environment, specifically within FedRAMP-authorized or FISMA-compliant cloud environments.
• Experience deploying and operating tools across multiple security domains including vulnerability management, incident detection and response, event/audit log collection and analysis, and network and web application firewalls.
• Familiarity with ServiceNow and its integration within security operations and GRC workflows.
• Knowledge of single sign-on (SSO) concepts using SAML and OAuth2 within cloud environments.
• Experience with Infrastructure as Code (IaC) tools such as Terraform, CloudFormation, or ARM templates to support secure cloud deployments.
• Master's degree in Information Systems, Cybersecurity, or a related field.

Our Equal Employment Opportunity Policy:

The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or to apply to a position on our website, please contact Heaven Wood via e-mail at [e-mail] or by calling 703-488-9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long‑term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com .

Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352