Security Compliance Engineer – RMNA Windows Infra

Amazon Web Services (AWS); Herndon (VA); On-site; USD 117,000 - 167,000; Full time

Job summary

Amazon Web Services (AWS) is seeking a Security Compliance Engineer for RSCI to monitor, assess, and drive security compliance across RMNA networks. You will manage vulnerability scans, remediation actions, and dashboards that inform leadership and customer authorization systems.

The role requires hands-on work with Tenable/Nessus, automation via Ansible and PowerShell, and collaboration with service owners to validate findings and drive remediation.

Qualifications

• Associate's degree or above, or Cloud+ or GICSP (Global Industrial Cyber Security Professional) or GSEC (GIAC Security Essentials) or SSCP (Systems Security Certified Practitioner)
• Knowledge of configuration management systems, such as Puppet, Chef, Ansible, or related systems
• 3+ years of systems administration (Linux or Windows) experience
• Current, active US Government Security Clearance of TS/SCI with Polygraph

Responsibilities

• Operate and maintain Tenable Security Center and Nessus scanning infrastructure across multiple isolated ADC environments
• Conduct vulnerability scans, analyze results, and drive service teams to patch compliance within SLA thresholds (Critical/High: 30 days, Moderate: 90 days, Low: 180 days)
• Develop, operate, and maintain the comply-to-connect solution for RMNA networks
• Assess environments against DISA STIGs for Windows 11, Windows Server, Microsoft Exchange, and Skype for Business; identify and track compliance gaps
• Build and maintain security compliance dashboards providing real-time visibility into host health, patch status, and SLA compliance
• Produce scan data and compliance artifacts for ingestion by AWS security teams and external customer authorization systems
• Conduct threat assessments against RMNA infrastructure including Ansible automation workflows
• Contribute to and maintain security accreditation packages (RMF A&A documentation) for RMNA
• Develop Ansible playbooks and PowerShell automation to streamline compliance scanning, reporting, and remediation tracking
• Partner with A&A to review and validate scan data prior to customer delivery
• Create and maintain runbooks, compliance procedures, and standard operating procedures
• Participate in on-call rotation for security and compliance events
• Participate in weekly operations meetings reviewing Tenable dashboards and SLA compliance with service managers

Skills

Systems Administration

Networking fundamentals

Understanding security controls

Windows/Linux administration

Education

Associate's degree or above

Cloud+

GICSP

GSEC

SSCP

Tools

Puppet

Chef

Ansible

Job description

Amazon Web Services (AWS) is seeking a Security Compliance Engineer for RSCI to monitor, assess, and drive security compliance across RMNA networks. You will manage vulnerability scans, remediation actions, and dashboards that inform leadership and customer authorization systems.

The role requires hands-on work with Tenable/Nessus, automation via Ansible and PowerShell, and collaboration with service owners to validate findings and drive remediation.