Cloud Security Engineer 3

Cybersecurity Jobs; Bethesda (MD); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Company-paid health premiums

Dental premiums

Vision premiums

401(k) with 8% total company match

Flexible PTO up to 20 days

11 paid floating holidays

Hybrid/On-site flexibility

Job summary

Base-2 Solutions is seeking a Cloud Security Engineer 3 to support the DOMEX Technology Platform. This onsite Bethesda, MD role focuses on securing, hardening, and maintaining compliance for cloud-based platforms across secure networks.

You will assess security in cloud-native environments, implement controls for Kubernetes, and integrate security into CI/CD pipelines within a DevSecOps culture. A TS/SCI clearance with CI poly is required, along with DoD 8570-M IAT II certification.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor’s degree or equivalent with six years of related experience.
• At least one DoD 8570.01-M IAT Level II or higher certification.
• 2+ years deploying AWS in cloud environments.
• Experience securing Kubernetes and integrating security into CI/CD pipelines.
• Experience with RMF, vulnerability management, and cloud security best practices.

Responsibilities

• Provide security expertise for cloud and cloud-native environments.
• Conduct security assessments, vulnerability management, and risk analysis for cloud-based systems.
• Implement and maintain security controls for Kubernetes clusters and containerized applications.
• Integrate security measures into CI/CD pipelines and DevSecOps processes.
• Develop and maintain ATO packages and support NIST SP 800-37/800-53 and ICD 503 compliance.
• Collaborate with compliance personnel, engineers, and Government counterparts to ensure regulatory compliance.

Skills

Cloud security

Vulnerability management

DevSecOps

CI/CD security

Kubernetes security

RMF/compliance

Education

Bachelor’s degree

Tools

AWS

Kubernetes

Splunk

Nessus

SonarQube

Prisma Cloud

Job description

Base-2 Solutions is seeking a Cloud Security Engineer 3 to support the DOMEX Technology Platform. In this onsite role in Bethesda, MD, you will help secure, harden, and maintain compliance for cloud-based platforms used in support of OSINT-focused mission systems across multiple secure networks.

Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.
• Conduct security assessments, perform vulnerability management, and carry out risk analysis for cloud-based systems operating across secure enclaves.
• Implement and maintain security controls for Kubernetes clusters and containerized applications.
• Integrate security measures into CI/CD pipelines and support DevSecOps processes.
• Develop and maintain ATO packages and support compliance activities aligned to NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and ICD 503.
• Collaborate with compliance personnel, engineers, architects, and Government counterparts to ensure regulatory compliance.

Requirements

• Security clearance: Active TS/SCI with ability to obtain a CI Polygraph.
• Education and experience: Bachelor’s degree or equivalent with a minimum of six years of experience in the category field.
• Three additional years of experience may be substituted for a bachelor’s degree.
• Certification: At least one DoD 8570.01-M IAT Level II or higher certification.
• At least 2+ years working in the cloud, securely configuring and deploying AWS services.
• Demonstrated experience securing Kubernetes platforms and integrating security into CI/CD pipelines and containers, including understanding microservices architecture and service mesh.
• Experience with RMF, vulnerability management, and cloud compliance and security best practices.

Technologies

Work will involve AWS, Kubernetes, CI/CD pipelines, and DevSecOps, along with compliance frameworks and standards such as NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and ICD 503. The role also references RMF, microservices architecture, service mesh, and security toolsets including Splunk, Nessus, SonarQube, Prisma Cloud, DAST, and SAST, as well as a Zero Trust framework and Generative AI.

Preferred Qualifications

• Multiple IAT/IAM II or III advanced certifications such as CISSP-ISSAP/ISSEP, CISM, CCSP, or SecurityX/CASP+ CE.
• AWS Solutions Architect or AWS Security Specialty certifications.
• Kubernetes certifications such as KCNA, CKA, or CKS.
• Linux administration experience and certifications including Linux+ or Red Hat credentials such as RHCSA or RHCE.
• Experience with security tools including Splunk, Nessus, SonarQube, Prisma Cloud, DAST, and SAST tools.
• Experience applying Zero Trust framework principles to secure systems.
• Prior network engineering experience.
• Experience applying security controls to Generative AI implementations.

Education and Experience Equivalency

• High School Diploma/GED with 9 years of experience.
• Associate’s Degree with 9 years of experience.
• Bachelor’s Degree with 6 years of experience.
• Master’s Degree with 6 years of experience.
• PhD with 6 years of experience.

Benefits

• Competitive fixed salary or hourly pay based on experience, skills, location, and internal equity.
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
• 100% company-paid medical premiums for employees and eligible dependents, with plan options through CareFirst, Kaiser, and UnitedHealthcare (PPO, POS, HMO, and HSA-compatible plans).
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.
• 100% company-paid premiums for short-term disability and long-term disability.
• 100% company-paid premiums for accidental death and dismemberment (AD&D) and life insurance up to $200,000.
• 401(k) with immediate vesting: 4% company match plus 4% non-elective company contribution (8% total), with pre‑tax and Roth options.
• Up to 20 days of flexible paid time off (PTO) and 11 paid floating holidays.
• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).