Federal Senior Cloud Security Engineer

Horizon3; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Growth opportunities

Innovation-driven culture

Diverse and inclusive team

Remote-friendly

Job summary

Horizon3 is seeking a Sr. Cloud Security Engineer for the Federal team to analyze, design, implement, and validate security controls for AWS GovCloud environments.

You will serve as a technical leader, collaborating with the Director of Federal Operations and engineering teams to ensure a compliant cloud architecture. Responsibilities include building guardrails, automating threat detection, and guiding security throughout the CI/CD pipeline using Terraform and GitLab CI/CD, with emphasis on

Qualifications

• Bachelor’s degree in Computer Science or Cybersecurity.
• Minimum five years securing AWS environments and five+ years cybersecurity overall.
• Experience with FedRAMP and DoD IL-4/5 is preferred.

Responsibilities

• Analyze, design, configure, implement and validate security solutions for AWS GovCloud.
• Develop security guardrails and automate threat detection throughout CI/CD.
• Monitor and improve cloud security posture using GuardDuty, Security Hub, WAF, CloudTrail.
• Define IAM best practices, least privilege, federated identity, RBAC, and remediation.
• Lead incident response, post-mortem analysis and long-term preventive measures.

Skills

AWS security

DevSecOps

Terraform

GitLab CI/CD

IAM best practices

Threat modeling

Incident response

Automation

Security monitoring

Security architecture

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

Terraform

GitLab CI/CD

AWS services

Job description

• The Sr. Cloud Security Engineer, Federal performs the tasks necessary to analyze, design, configure, implement, and validate security solutions for H3’s AWS GovCloud infrastructure
• This role serves as a technical leader and “self-starter,” working closely with the Director of Federal Operations, Security Operations Manager, and engineering teams to ensure a secure and compliant cloud architecture
• Tasks will consist of developing security guardrails, automating threat detection, and managing the end-to-end security lifecycle within the CI/CD pipeline. This position prioritizes Federal AWS environments and compliance (FedRAMP, IL-4/5) while providing subject matter expertise and support for commercial cloud security as the Federal Team grows
• Cloud Security Engineering: Design and implement robust security controls across AWS environments, including AWS IAM, SCPs, VPC security, S3 bucket policies, and key management
• Infrastructure as Code (IaC): Utilize Terraform to deploy and manage security configurations, ensuring “Security as Code” is integrated into all cloud deployments
• DevSecOps Integration: Implement and maintain GitLab CI/CD pipelines for automated security testing and scanning of AWS resources
• Posture Management & Monitoring: Continuously monitor and improve cloud security posture by managing and tuning services such as GuardDuty, Security Hub, AWS WAF, and CloudTrail
• Identity & Access Management: Define and enforce IAM best practices, including least privilege, federated identity, RBAC, and automated remediation of deficiencies
• Threat Modeling & Assessment: Conduct architecture reviews and risk assessments for new cloud features to identify and mitigate vulnerabilities before deployment
• Incident Response & Analysis: Investigate suspected attacks and lead security incident management, providing post-mortem analysis and developing long-term preventive measures
• Compliance & Standards: Develop and maintain security policies and procedures to ensure compliance with FedRAMP and DoD IL-4/5
• Reporting & Metrics: Develop creative reporting mechanisms and metrics to communicate cloud risk and security themes to business owners and leadership

Benefits

• Growth Opportunities: Be part of a dynamic and growing team with numerous career advancement opportunities
• Innovation-Driven Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking
• Inclusive and Diverse Team: We value diversity and promote an inclusive culture where everyone can thrive
• Flexible Work Environment: Enjoy the convenience and work-life balance that comes with remote work

Framework Fluency: Familiarity with cybersecurity frameworks such as NIST, CIS, and MITRE ATT&CK

Integrity & Ownership: Demonstrated commitment to process improvement, technical integrity, and a “learn-it-all” attitude

AWS Expertise: Deep knowledge of AWS services and security architecture

Communication: Excellent verbal and written skills, with the ability to explain complex technical concepts to non-technical stakeholders

Analytical Problem Solving: Excellent skills in log processing, event analysis, and incident management

Automation Proficiency: In-depth knowledge of Terraform and GitLab CI/CD strategies

Certifications: AWS Certified Security - Specialty preferred; CISSP or relevant security certifications preferredEducation: Bachelor’s degree in Computer Science or Cybersecurity; Military Service EquivalentClearance/Auth: Must be authorized to work in the U.S. and pass a criminal background checkU.S. Government Security Clearance is a plusExperience: Minimum five (5) years of experience in securing AWS environments; 5+ years of general cybersecurity experience