Cloud Security Engineer — AI & Gov Cloud Specialist

Amentum; Hagåtña (GU); On-site; USD 130,000 - 140,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Cloud Security Engineer to design, implement, and maintain strong security controls across government and commercial cloud environments, including Microsoft 365 GCC High, Azure, AWS, and hybrid setups.

The role emphasizes adapting security architecture to regulatory requirements, automating guardrails, and delivering evidence for audits while supporting risk assessment and incident response.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field.
• Five years of related experience in cloud security or infrastructure engineering.

Responsibilities

• Implement and maintain security controls across M365, Azure, AWS, and hybrid services.
• Configure and test security policies, IaC controls, deployment automation, and integrations.
• Review findings, troubleshoot control failures, and recommend changes that reduce risk.
• Administer cloud security posture management and workload protection capabilities.
• Maintain platform health, tune controls, document exceptions, and identify gaps.
• Integrate cloud telemetry with SOC and MSSP; support investigations.
• Coordinate exposure prioritization with Vulnerability Management and remediation.
• Implement and validate controls for CMMC and NIST SP 800-171/172.
• Support GCC High and CUI workloads; understand gov-cloud limits and data handling.
• Translate regulatory requirements into practical cloud configurations; maintain audit evidence.
• Perform risk assessments and control testing; maintain remediation status.
• Implement and operate security controls for AI/ML services, copilots, and agents.
• Configure IAM, data-source permissions, secrets handling, and sandboxing.
• Test controls against prompt injection, data exposure, and over-privileged agents.
• Evaluate AI service configurations for security, privacy, and data residency.
• Automate AI security configurations via policy, IaC, and deployment pipelines.
• Integrate AI telemetry with enterprise monitoring.
• Work with teams to implement controls and maintain docs.
• Stay current on cloud and AI threats; propose improvements.
• Participate in SOC activities and provide off-hours support.

Skills

Cloud security

Automation

Risk assessment

Audit readiness

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft 365

Azure

AWS

Job description

Amentum is seeking a Cloud Security Engineer to design, implement, and maintain strong security controls across government and commercial cloud environments, including Microsoft 365 GCC High, Azure, AWS, and hybrid setups.

The role emphasizes adapting security architecture to regulatory requirements, automating guardrails, and delivering evidence for audits while supporting risk assessment and incident response.