Cloud Security Engineer 3

Base-2 Solutions; Bethesda (MD); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Company-paid health premiums

Dental premiums

Vision premiums

401(k) with company match

Job summary

Base-2 Solutions is seeking a Cloud Security Engineer to secure, harden, and maintain compliance of cloud platforms across multiple secure networks in support of OSINT-focused mission systems. You will implement security controls for Kubernetes clusters, integrate security into CI/CD pipelines, and develop ATO packages in line with NIST SP 800-37/800-53 and CNSSI 1253.

The role requires an active TS/SCI clearance with CI polygraph potential, a bachelor’s degree or equivalent with several years

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree or equivalent with 6+ years in the field.
• At least one DoD 8570.01-M IAT Level II certification.
• 2+ years cloud experience with AWS.
• Experience securing Kubernetes platforms and CI/CD pipelines.
• Knowledge of RMF and cloud compliance/security best practices.

Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.
• Conduct security assessments, vulnerability management, and risk analysis for cloud systems.
• Configure security controls for Kubernetes clusters and containerized apps.
• Integrate security into CI/CD pipelines and DevSecOps processes.
• Develop and maintain ATO packages and support NIST/DoD standards.
• Collaborate with compliance, engineers, and Government counterparts.

Skills

Security clearance TS/SCI

CI Polygraph

Kubernetes security

CI/CD security integration

Education

Bachelor's degree or equivalent

Tools

Splunk

Nessus

Prisma Cloud

SAST/DAST tools

Job description

• Required Security Clearance: Top Secret/SCI
• Location: Bethesda, MD
• Work Type: On-Site
• Shift: First

• Requisition ID: 4789
• Standard Title: Cloud Security Engineer
• Required Security Clearance: Top Secret/SCI
• Location: Bethesda, MD
• Work Type: On-Site
• Shift: First
• Referral Eligibility: Eligible
• U.S. Citizenship Required? Yes

Position Summary

• Support the DOMEX Technology Platform as a Cloud Security Engineer 3 responsible for securing, hardening, and maintaining compliance of cloud-based platforms across multiple secure networks in support of OSINT-focused mission systems.

Essential Duties And Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.
• Perform security assessments, vulnerability management, and risk analysis for cloud-based systems across secure enclaves.
• Implement and manage security controls for Kubernetes clusters and containerized applications.
• Integrate security measures into CI/CD pipelines and DevSecOps processes.
• Develop and maintain ATO packages and support compliance with standards including NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and ICD 503.
• Collaborate with compliance personnel, engineers, architects, and Government counterparts to ensure regulatory compliance.

Required Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree or equivalent with a minimum of six years of experience in the category field. Three additional years of experience may be substituted for a bachelor's degree.
• At least one DoD 8570.01-M IAT Level II or higher certification.
• 2+ years working in the cloud, securely configuring and deploying AWS services.
• Demonstrated experience securing Kubernetes platforms and integrating security into CI/CD pipelines and containers; must understand microservices architecture and service mesh.
• Experience with RMF, vulnerability management, and cloud compliance/security best practices.

Preferred Qualifications

• Multiple IAT/IAM II or III advanced certifications such as CISSP-ISSAP/ISSEP, CISM, CCSP, or SecurityX/CASP+ CE.
• AWS Solutions Architect or AWS Security Specialty certifications.
• Kubernetes certifications such as KCNA, CKA, or CKS.
• Linux administration experience and certifications such as Linux+ or Red Hat certifications including RHCSA or RHCE.
• Experience with security tools such as Splunk, Nessus, SonarQube, Prisma Cloud, DAST, and SAST tools.
• Experience applying Zero Trust framework to secure systems.
• Prior network engineering experience.
• Experience applying security controls to Generative AI implementations.

Required Education and Experience Equivalency

• High School Diploma/GED with 9 years of experience.
• Associates Degree with 9 years of experience.
• Bachelors' Degree with 6 years of experience.
• Masters' Degree with 6 years of experience.
• PhD with 6 years of experience.

Required Certifications

• At least one DoD 8570.01-M IAT Level II or higher certification.

Required Security Clearance

• Active TS/SCI with ability to obtain a CI Polygraph.

Pay & Benefit Highlights

Compensation

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).

Health

• 100% company-paid medical premiums for employees and eligible dependents.
• Choose from multiple plan options with CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.

Income Protection

• 100% company-paid premiums for short-term disability.
• 100% company-paid premiums for long-term disability.
• 100% company-paid premiums for accidental death & dismemberment (AD&D).
• 100% company-paid premiums for life insurance up to $200,000.

Retirement

• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total).
• 401(k) pre-tax and Roth options.

Leave

• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.

Work-Life Balance

• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).