Remote Cloud Security Engineer - GovCloud & Multi-Cloud

Zermount, Inc.; Arlington (VA); Hybrid; USD 155,000 - 190,000; Full time

Job summary

Zermount, Inc. is seeking a Cloud Security Engineer to design and operate a secure cloud foundation across AWS GovCloud and multi-cloud environments (Azure/GCP).

You will implement guardrails as code, remediate drift in near real-time, and help advance a federal cATO program. The role requires 8+ years delivering federal cloud infrastructure on AWS GovCloud, IaC with Terraform and Ansible, CSPM tooling, and identity integrations (Okta/Entra ID).

Qualifications

• 8+ years delivering federal cloud infrastructure on AWS GovCloud with hands-on Terraform/IaC.
• Multi-cloud architecture proficiency across AWS and at least one of Azure or GCP.
• Scripting in Python and Bash; CI/CD (Jenkins) and observability (Splunk/CloudWatch).

Responsibilities

• Design, build, and operate secure IaC on AWS GovCloud and multi-cloud environments.
• Manage cloud security services (Security Hub, GuardDuty, Config) and CSPM across AWS, Azure/GCP.
• Implement event-driven security automation and drift remediation.
• Maintain CI/CD pipelines (Jenkins, Terraform, Ansible) and observability tooling (Splunk, CloudWatch) to provide continuous control evidence.
• Maintain FedRAMP-aligned security posture.

Skills

AWS GovCloud

Multi-cloud architecture

Automation

FedRAMP

Python

Bash

Security operations

Okta/Entra ID integration

Education

Bachelor's degree in computer engineering / CS / IT / cyber security

Tools

Terraform

Ansible

Jenkins

Splunk

CloudWatch

Prisma Cloud

Job description

Zermount, Inc. is seeking a Cloud Security Engineer to design and operate a secure cloud foundation across AWS GovCloud and multi-cloud environments (Azure/GCP).

You will implement guardrails as code, remediate drift in near real-time, and help advance a federal cATO program. The role requires 8+ years delivering federal cloud infrastructure on AWS GovCloud, IaC with Terraform and Ansible, CSPM tooling, and identity integrations (Okta/Entra ID).