Cloud Security Engineer: AI & Gov Cloud Safeguards

Amentum; Trenton (NJ); On-site; USD 130,000 - 140,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Educational reimbursement

Parental leave

Employee stock purchase plan

Disability and life insurance

Job summary

Amentum is seeking a Cloud Security Engineer to implement and maintain security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid environments. The role emphasizes hands-on cloud engineering, regulatory alignment, and risk-based guardrails for AI and agent security.

You will work with Risk and Compliance, and Security Operations to ensure audit readiness and secure deployment of cloud-based services.

Qualifications

• U.S. citizenship required.
• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or related field, or an equivalent combination of education and relevant experience.
• Five years of related experience, including three or more years in cloud, security, systems, or infrastructure engineering.
• Hands-on experience with Microsoft cloud or AWS security capabilities and the ability to support Microsoft 365, Azure, AWS, and hybrid services as needed.
• Experience implementing or maintaining technical controls through cloud policy, scripting, automation, or infrastructure as code.

Responsibilities

• Implement and maintain security controls across Microsoft 365 Commercial, GCC High, Azure, AWS, and hybrid services.
• Configure and test security policies, IaC controls, deployment automation, and integrations with owners.
• Review findings, troubleshoot control failures, and propose practical configuration changes to reduce risk.
• Administer cloud security posture management and workload protection, including onboarding, policy config, and monitoring.
• Coordinate with Vulnerability Management for exposure prioritization and remediation with cloud owners; role does not own underlying services.
• Collaborate with SOC and MSSP; provide off-hours support as needed and assist with investigations.

Skills

Cloud security concepts

Identity and access controls

Automation and IaC

Security telemetry and monitoring

Risk assessment and audit readiness

Education

Bachelor's degree in cybersecurity/IT/CS/engineering

Tools

Microsoft 365

GCC High

Azure

AWS

IaC tooling

Job description

Amentum is seeking a Cloud Security Engineer to implement and maintain security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid environments. The role emphasizes hands-on cloud engineering, regulatory alignment, and risk-based guardrails for AI and agent security.

You will work with Risk and Compliance, and Security Operations to ensure audit readiness and secure deployment of cloud-based services.