Onsite Cloud Security Engineer — FedRAMP & GovCloud

MatrixSpace; Burlington (MA); On-site; USD 120,000 - 170,000; Full time

Job summary

MatrixSpace is seeking a hands-on Cloud Security Engineer to join our Security team onsite in Massachusetts. You will build and secure AWS environments, support FedRAMP and other government security requirements, and collaborate across DevOps, cloud, security, and compliance teams.

You’ll implement security controls, automate deployment workflows with Terraform and Pulumi, and help integrate security into CI/CD pipelines while working with assessors and 3PAOs.

Qualifications

• 3–6 years of experience in security engineering, cloud security, DevSecOps, or related field.
• Hands-on AWS experience with networking, Linux, IAM, encryption, logging, and monitoring.
• Experience with FedRAMP, NIST 800-53/800-171, CMMC, RMF or similar standards.
• Ability to translate security requirements into practical technical controls with engineering teams.
• Hands-on DevOps, IaC, source control, CI/CD, and automated deployment workflows.
• Knowledge of system hardening, vulnerability remediation, and secure configuration lifecycles.

Responsibilities

• Build, operate, and secure AWS environments in alignment with security baselines and FedRAMP.
• Collaborate with software and AI teams to embed security into architecture, CI/CD, and deployments.
• Support FedRAMP authorizations, continuous monitoring, POA&Ms, and remediation tracking.
• Perform security reviews, risk assessments, and vulnerability management across systems.
• Implement controls across networking, Linux, IAM, encryption, logging, and monitoring.
• Develop IaC and release automation with Terraform, Pulumi, and Python.

Skills

AWS security

Cloud security

DevSecOps

IaC

CI/CD

Security monitoring

Vulnerability management

Tools

Terraform

Pulumi

Python

Job description

MatrixSpace is seeking a hands-on Cloud Security Engineer to join our Security team onsite in Massachusetts. You will build and secure AWS environments, support FedRAMP and other government security requirements, and collaborate across DevOps, cloud, security, and compliance teams.

You’ll implement security controls, automate deployment workflows with Terraform and Pulumi, and help integrate security into CI/CD pipelines while working with assessors and 3PAOs.