Lead Engineer (AWS)

Aprio; Atlanta (GA); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Medical, Dental, and Vision Insurance

401k with Profit Sharing

Parental Leave

Job summary

Aprio invites you to join our Risk Advisory and Assurance Services (RAAS) team as Lead Engineer (AWS). You will help clients strengthen security posture, architect Zero Trust and XDR deployments, and translate complex requirements into practical solutions.

This role emphasizes collaboration with government and public-sector engagements and requires active security expertise. Expect a fast-growing environment with learning, agility, and purpose.

Qualifications

• Bachelor’s degree or equivalent experience.
• 7+ years of consulting experience with client delivery.
• 3+ years of hands-on design and implementation of AWS and/or GCP security tools.
• Strong communication and stakeholder management; able to lead client conversations.
• Active certifications in CISSP or AWS/GCP security domains preferred.

Responsibilities

• Act as a trusted consultant to clients, guiding them through complex security and compliance challenges.
• Be the go-to Cloud security expert on a team that values innovation and expertise.
• Develop security strategies aligned with frameworks like CMMC, NIST 800-171, and NIST 800-53.
• Architect and implement Zero Trust strategies, XDR deployments, and threat modeling for mid-market and enterprise clients.
• Develop standardized methodologies, playbooks, and procedures for technical delivery.

Skills

Identity & Access

Threat Protection

Data Protection

Cloud Security

Automation & Scripting

Education

Bachelor’s degree or equivalent experience

Tools

AWS security tools

GCP security tools

Job description

Work with a Top 20 CPA and advisory firm that Accounts for Anything. Aprio has 40 U.S. office locations, as well as international office locations and more than 3,200 team members that speak 60+ languages across the globe. By bringing together proven expertise, deep understanding, and strategic foresight for fast-growing industries, Aprio ensures clients are prepared for wherever life or business may take them. Discover a top-rated culture, vast growth opportunities and your next big career move with Aprio.

Join Aprio's Risk Advisory and Assurance Services (RAAS) team and you will help clients maximize their opportunities. Aprio Advisory Group, LLC is a progressive, fast-growing firm looking for a Lead Engineer (AWS) to join their dynamic team.

Ready to do more with your Microsoft security expertise? Join Aprio and help organizations across industries navigate complex cybersecurity and compliance landscapes with confidence.

At Aprio, we’re not just checking boxes—we’re securing the future. As a Microsoft Security Engineer, you’ll work with cutting-edge Microsoft tools, support high-impact compliance frameworks like FedRAMP and CMMC, and help shape the security posture of both public and private sector organizations.

This position supports U.S. government and defense‑related clients. Certain engagements require personnel who are eligible to obtain a U.S. security clearance or who meet client‑defined access requirements for controlled environments. U.S. citizenship may be a requirement of obtaining a U.S. security clearance or meeting these access requirements. These requirements are only tied to this specific job posting. All Aprio employment decisions are made in accordance with applicable laws.

• Act as a trusted consultant to clients, guiding them through complex security and compliance challenges.
• Be the go-to Cloud security expert on a team that values innovation and expertise.
• Join a recognized leader in government and cloud security (FedRAMP 3PAO, CMMC C3PAO, Microsoft Government Cloud Partner).
• Work with forward-thinking professionals in a culture that values learning, agility, and purpose.
• Support the client relationship from discovery through delivery—serve as the technical consultant.
• Assist in workshops, architecture sessions, and demos to translate client needs into actionable solutions.
• Deep expertise in at least 3 of the following areas, with working knowledge of others:
• Identity & Access: Native AWS and/GCP stack
• Threat Protection: Native AWS and/GCP stack
• Data Protection: Native AWS and/GCP stack
• Cloud Security: Native AWS and/GCP stack
• Automation & Scripting: Python
• Develop security strategies aligned with frameworks like CMMC, NIST 800-171, and NIST 800-53.
• Support in development of security policies and procedures.
• Architect and implement Zero Trust strategies, XDR deployments, and threat modeling frameworks for mid-market and enterprise clients.
• Ensure compliance while improving operational security—deliver measurable business value.
• Develop standardized methodologies, playbooks, and procedures for technical delivery.

• Bachelor’s degree or equivalent experience.
• 7+ years of consulting experience, partnering with clients to deliver tailored solutions.
• Strong communication and stakeholder management skills—comfortable leading client conversations.
• 3+ years of Hands-on design and implementation of AWS and/or GCP security tools.
• Deep understanding of core cybersecurity principles: zero trust, privileged access, APT threats, credential theft, and just-in-time administration.

At least 1 of the following certifications needed (active or obtained within 90 days of hire):

• CISSP
• AWS SAA-C03
• AWS SCS-C03
• Professional Cloud Security Engineer certification

Note: Active certifications are required for consideration.

The application window is anticipated to close on August 10, 2026, and may be extended as needed.

Why work for Aprio:

Whether you are just starting out, looking to advance into management or searching for your next leadership role, Aprio offers an opportunity to grow with a future-focused, innovative firm.

Perks/Benefits we offer for full-time team members:

• Medical, Dental, and Vision Insurance on the first day of employment
• Flexible Spending Account and Dependent Care Account
• 401k with Profit Sharing
• 9+ holidays and discretionary time off structure
• Parental Leave – coverage for both primary and secondary caregivers
• Tuition Assistance Program and CPA support program with cash incentive upon completion
• Discretionary incentive compensation based on firm, group and individual performance
• Incentive compensation related to origination of new client sales
• Top rated wellness program
• Flexible working environment including remote and hybrid options

What’s in it for you:

• Working with an industry leader: Be part of a high-growth firm that is passionate for what’s next.
• An awesome culture: Thirty-one fundamental behaviors guide our culture every day ensuring we always deliver an exceptional team-member and client experience. We call it the Aprio Way. This shared mindset creates lasting relationships between team members and with clients.
• A great team: Work with a high-energy, passionate, caring and ambitious team of professionals in a collaborative culture.
• Entrepreneurship: Have the freedom to innovate and bring your ideas to help us grow to become the CPA firm of choice nationally.
• Growth opportunities: Grow professionally in an environment that fosters continuous learning and advancement.
• Competitive compensation: You will be rewarded with competitive compensation, industry-leading benefits and a flexible work environment to enjoy work/life balance.

EQUAL OPPORTUNITY EMPLOYER

Aprio is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race; color; religion; national origin; sex; pregnancy; sexual orientation; gender identity and/or expression; age; disability; genetic information, citizenship status; military service obligations or any other category protected by applicable federal, state, or local law.

Aprio, LLP and Aprio Advisory Group, LLC, operate in an alternative business structure, with Aprio Advisory Group, LLC providing non-attest tax and consulting services, and Aprio, LLP providing CPA firm services.