Security Lead - Senior Cloud Security Engineer

Steampunk; McLean (VA); On-site; USD 130,000 - 180,000; Full time

Job summary

Steampunk is seeking a Senior Cloud Security Engineer in McLean, VA to design and implement secure cloud architectures for migration, optimization, and deployment. You will work on zero-trust, IAM policies, and data protection while integrating security into DevSecOps practices.

You will mentor junior engineers, automate security processes, and collaborate with developers to ensure secure, compliant cloud solutions across large-scale deployments.

Qualifications

• U.S. government security clearance eligibility required.
• Bachelor’s degree in IT-related field.
• 7+ years of cloud solutions architecture experience.
• 5+ years AWS experience.
• 5+ years with Git SCM providers (GitHub/GitLab/Bitbucket).
• 7+ years in Agile environments.
• 5+ years IaC and orchestration experience.
• 5+ years monitoring, risk assessment, threat modeling, and security testing in cloud environments.
• 5+ years documenting POA&M, SSP, and A&A support documentation.
• Must hold an AWS certification (Cloud Practitioner or higher).

Responsibilities

• Identify secure cloud-based solutions including zero-trust components and IAM policy.
• Collaborate with stakeholders to balance security with usability.
• Monitor cloud environments with native tools or SIEM; investigate incidents.
• Review infrastructure as code for risk and compliance.
• Ensure security controls via risk assessments and threat modeling.
• Automate vulnerability and patch management processes.
• Work with developers and DevSecOps to enforce security processes.
• Support enterprise cloud security with IaC for large deployments.
• Document current environment state and produce options and recommendations.
• Mentor junior team members and drive continuous improvement.

Skills

Cloud security architecture

Zero-trust & IAM

Threat modeling

Security monitoring

Compliance & risk

DevSecOps & automation

Mentoring

Communication

Security clearance

POA&M/SSP/A&A documentation

Education

Bachelor’s Degree in IT-related field

Tools

Terraform

CloudFormation

Ansible

Git (GitHub/GitLab/Bitbucket)

Job description

Overview

As a Senior Cloud Security Engineer, you will work within our growing DevSecOps practice delivering features to support developing, testing, and monitoring secure cloud architectures for cloud migration, cloud optimization and cloud deployment. We are looking for candidates with experience with cloud platform services, cybersecurity and DevOps practices such as infrastructure as code and confirmation management automation.

Contributions

Responsibilities include:

• Identify and implement the most secure cloud-based solutions for the customer including components for zero-trust architectures, identity and access management policy, and data privacy
• Understand the needs of stakeholders and optimize solutions that marry security with usability
• Monitor cloud environments for suspicious activities with cloud native monitoring or SIEM solutions and investigate security incidents where appropriate
• Examine infrastructure as code written by others and analyzing risk
• Ensure that systems are safe and secure against cybersecurity threats through risk assessment, threat modeling, and compliance with industry standards (e.g. NIST, ISO 27011, HIPPA, FISMA, etc.)
• Identify technical problems, perform root cause analysis, and develop updates and ‘fixes’
• Automate security processes such as vulnerability management and patch management
• Work with software developers and DevSecOps engineers to ensure that development follows established security processes and works as intended
• Support enterprise cloud security through infrastructure as code including any activities around automated server or network configurations, large-scale software deployments, and monitoring and testing
• Ensure effective design and implementation of data protection and encryption mechanisms for data at rest and in transit
• Document as-is state of the environment, perform a gap analysis, and produce artifacts that articulate options and recommendations
• Identify, analyze, and resolve infrastructure vulnerabilities and application deployment issues
• Act as an individual contributor and mentor more junior team members
• Engineer and implement solutions and provide recommendations for continuous improvement for the services provided
• Present regular status updates and provide cross training to other team members

Qualifications

Required:

• Ability to obtain a U.S. government Security Clearance
• Bachelor’s Degree in an IT-related field
• 7+ years of experience architecting, designing, developing, and implementing cloud solutions
• 5+ years of experience with AWS
• 5+ years of experience with Git SCM providers such as GitHub, GitLab, Bitbucket
• 7+ years of experience supporting systems development within an Agile environment
• 5+ years of experience implementing infrastructure as code and orchestration
• 5+ years of experience conducting monitoring, risk assessment, threat modeling, and security testing in cloud environments
• 5+ years of experience documenting POA&M, SSP, and A&A support documentation
• Must possess an AWS Certified Cloud Practitioner certification or an AWS Associate-, Professional-, or Specialty-level certification

Preferred:

• Certifications:
  • AWS Certified Security–Specialty
  • AWS Certified Solution Architect–Associate
  • Certified Information Systems Security Professional (CISSP)
• Excellent written and verbal communication skills, interpersonal, and collaborative skills
• Experience with documenting an as-is state of the environment, performing a gap analysis, and producing artifacts that articulate options and recommendations
• Experience with scripting in languages such as Bash, PowerShell, Python, Groovy, or Ruby
• Experience with automation tools, including Pivotal, Chef, Terraform, CloudFormation, or Ansible

About steampunk

Steampunk relies on several factors to determine salary, including but not limited to geographic location, contractual requirements, education, knowledge, skills, competencies, and experience. The projected compensation range for this position is $130,000 to $180,000. The estimate displayed represents a typical annual salary range for this position. Annual salary is just one aspect of Steampunk’s total compensation package for employees. Learn more about additional Steampunk benefits here.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers – and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.