Cloud Security Engineer: AI & Government Cloud Safeguards

Amentum; Santa Fe (NM); On-site; USD 130,000 - 140,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Job summary

Amentum is seeking a Cloud Security Engineer to implement and maintain security controls across Microsoft 365 GCC High, Azure, AWS, and hybrid cloud environments. The role focuses on guardrails, secure landing zones, and AI security for regulated data, including DFARS and NIST frameworks.

You will collaborate with risk, compliance, and platform teams to translate requirements into practical cloud configurations, drive automation, and ensure audit readiness while supporting government and

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field, or an equivalent combination of education and relevant experience.
• Five years of related experience, to include three or more years of relevant experience in cloud, security, systems, or infrastructure engineering.
• Hands-on experience with Microsoft cloud or AWS security capabilities and the ability to support Microsoft 365, Azure, AWS, and hybrid services as needed.
• Experience implementing or maintaining technical controls through cloud policy, scripting, automation, or infrastructure as code.

Responsibilities

• Implement and maintain security controls across Microsoft 365 Commercial and GCC High, Azure, AWS, and hybrid services, including cloud guardrails and workload protections.
• Configure and test security policies, infrastructure-as-code controls, deployment automation, and supporting integrations with owners.
• Review technical findings, troubleshoot control failures, and recommend practical configuration changes that reduce risk without disrupting services.
• Administer cloud security posture management and workload protection capabilities, including onboarding and policy configuration.
• Integrate cloud security telemetry with SOC and MSSP; support investigations when cloud expertise is needed.
• Coordinate exposure prioritization and remediation with Vulnerability Management and cloud owners.

Skills

Cloud security concepts

AI security risk awareness

Technical risk assessments

Scripting & IaC

Cross-functional collaboration

Education

Bachelor's degree in cybersecurity or related field

Tools

Microsoft 365 GCC High

Azure

AWS

Security monitoring tools

Job description

Amentum is seeking a Cloud Security Engineer to implement and maintain security controls across Microsoft 365 GCC High, Azure, AWS, and hybrid cloud environments. The role focuses on guardrails, secure landing zones, and AI security for regulated data, including DFARS and NIST frameworks.

You will collaborate with risk, compliance, and platform teams to translate requirements into practical cloud configurations, drive automation, and ensure audit readiness while supporting government and