Cloud Security Engineer: AI & Government Cloud Compliance

PAE Government Services Inc.; Richmond (VA); On-site; USD 130,000 - 140,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401(k) matching

Paid time off

Parental leave

Educational reimbursement

Job summary

Amentum is seeking a Cloud Security Engineer in the Richmond, VA area to implement and maintain security controls across Microsoft 365, GCC High, Azure, AWS, and hybrid environments. The role focuses on guardrails, automation, and evidence gathering to support audits and regulatory requirements for government and commercial workloads.

You will collaborate with Security Operations, Risk and Compliance, and platform owners to harden configurations, test controls, and drive remediation, including

Qualifications

• U.S. citizenship required.
• Bachelor’s degree in cybersecurity, IT, CS, engineering, or equivalent experience.
• 5 years in security, with 3+ years cloud/security/infrastructure engineering.
• Hands-on with Microsoft cloud or AWS security capabilities and hybrid environments.

Responsibilities

• Implement and maintain security controls across cloud environments (M365, Azure, AWS) and hybrid services.
• Configure policies, deployment automation, and tests; review findings and implement fixes.
• Administer cloud security posture management and workload protection; monitor and integrate telemetry.
• Support risk assessments, control testing, remediation, and audit readiness for regulations.

Skills

Cloud security

Governance

Automation

IaC

Risk assessment

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft 365

Azure

AWS

Job description

Amentum is seeking a Cloud Security Engineer in the Richmond, VA area to implement and maintain security controls across Microsoft 365, GCC High, Azure, AWS, and hybrid environments. The role focuses on guardrails, automation, and evidence gathering to support audits and regulatory requirements for government and commercial workloads.

You will collaborate with Security Operations, Risk and Compliance, and platform owners to harden configurations, test controls, and drive remediation, including