Cloud Security Engineer: AI & Gov Cloud Expert

Amentum; Denver (CO); On-site; USD 130,000 - 140,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401(k) matching

Paid time off

Parental leave

Employee stock purchase plan

Job summary

Amentum is seeking a Cloud Security Engineer in Denver, Colorado to implement and maintain security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid environments. You will translate regulatory requirements into guardrails, automate controls, and provide evidence for audits.

You will collaborate with Risk and Compliance, participate in SOC activities, and help secure AI services while ensuring cloud platforms remain compliant with NIST, CMMC, and other standards.

Qualifications

• U.S. citizenship is required for this position.
• Bachelor's degree in cybersecurity, IT, CS, engineering, or an equivalent combination of education and relevant experience.
• Five years of related experience, including 3+ years in cloud, security, systems, or infrastructure engineering.
• Hands-on experience with Microsoft cloud or AWS security capabilities and the ability to support Microsoft 365, Azure, AWS, and hybrid services as needed.
• Experience implementing or maintaining technical controls through cloud policy, scripting, automation, or infrastructure as code.

Responsibilities

• Implement and maintain security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid services.
• Configure security policies, infrastructure-as-code controls, deployment automation, and integrations with owners.
• Review findings, troubleshoot control failures, and recommend practical configuration changes to reduce risk.
• Administer cloud security posture management and workload protection capabilities.
• Coordinate exposure prioritization with Vulnerability Management and support remediation with cloud owners.

Skills

Cloud security

Governance

Risk assessment

Scripting

Education

Bachelor's degree in cybersecurity/IT/CS/engineering

Tools

Microsoft 365

Azure

AWS

Job description

Amentum is seeking a Cloud Security Engineer in Denver, Colorado to implement and maintain security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid environments. You will translate regulatory requirements into guardrails, automate controls, and provide evidence for audits.

You will collaborate with Risk and Compliance, participate in SOC activities, and help secure AI services while ensuring cloud platforms remain compliant with NIST, CMMC, and other standards.