Cloud Security Engineer: Zero-Trust & IAM Architect

Steampunk; McLean (VA); On-site; USD 110,000 - 155,000; Full time

Job summary

Steampunk is seeking a Cloud Security Engineer to join our DevSecOps practice. You will deliver secure cloud architectures for migration, optimization, and deployment, using IAM, zero-trust, and encryption best practices.

The role requires collaboration with developers and security teams to automate and monitor cloud environments, assess risks, and ensure compliance with standards. The ideal candidate has 5+ years of cloud security experience, hands-on IaC and automation tools, and active cloud

Qualifications

• Ability to obtain a U.S. government Security Clearance
• Bachelor's degree in an IT field OR Bachelor's degree in a non-IT field and 2 years related IT experience
• 5+ years of total experience
• 3 years of experience architecting, designing, developing, and implementing cloud solutions
• 3 years of experience with one or more clouds (i.e. AWS, Azure, or GCP)
• 3 years of experience with Git SCM providers such as GitHub, GitLab, Bitbucket
• 3 years of experience with systems development in an Agile environment
• 3 years of experience implementing infrastructure as code and orchestration
• 3 years of experience providing conducting monitoring, risk assessment, threat modeling and security testing in cloud environments
• 3 years of experience documenting POAMs, SSPs, and A&A support documentation
• Must have and maintain an active cloud or security related certification

Responsibilities

• Identify and implement the most secure cloud-based solutions for the customer including components for zero-trust architectures, identity and access management policy, and data privacy.
• Understand the needs of stakeholders and optimizesolutions that marry security with usability.
• Monitor cloud environments for suspicious activities with cloud native monitoring or SIEM solutions and investigate security incidents where appropriate.
• Examine infrastructure as code written by others and analyzing risk.
• Ensure that systems are safe and secure against cybersecurity threats through risk assessment, threat modeling, and compliance with industry standards (e.g. NIST, ISO 27011, HIPPA, FISMA, etc.).
• Identify technical problems, perform root cause analysis, and develop updates and 'fixes'.
• Automate security processes such as vulnerability management and patch management.
• Work with software developers and DevSecOps engineers to ensure that development follows established security processes and works as intended.
• Supportenterprise cloud security throughinfrastructure as code including any activities around automated server or network configurations, large-scale software deployments, and monitoring and testing.
• Ensure effective design and implementation of data protection and encryption mechanisms for data at rest and in transit.
• Document as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations.
• Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues.
• Act as an individual contributor and mentor more junior team members.
• Engineer and implement solutions and provide recommendations for continuous improvement for the services provided.
• Present regular status updates and provide cross training to other team members.

Skills

Cloud security

DevSecOps

Identity and access management

Zero-trust architecture

Security clearance eligibility

Cloud architecture

Agile

Git SCM

Infrastructure as code

Security monitoring / SIEM

Education

Bachelor's degree in IT or related field

2+ years IT experience in non-IT degree path

Tools

Terraform

CloudFormation

Ansible

Concourse

Bash / PowerShell / Python

Job description

Steampunk is seeking a Cloud Security Engineer to join our DevSecOps practice. You will deliver secure cloud architectures for migration, optimization, and deployment, using IAM, zero-trust, and encryption best practices.

The role requires collaboration with developers and security teams to automate and monitor cloud environments, assess risks, and ensure compliance with standards. The ideal candidate has 5+ years of cloud security experience, hands-on IaC and automation tools, and active cloud