Senior AWS Cloud Security Architect – On‑Site DC

ZipStaff Inc.; Washington (District of Columbia); On-site; USD 165,000 - 248,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

401(k) + 401(k) matching

Paid time off

Referral Program

Job summary

ZipStaff Inc. is seeking a Senior Cloud Security Engineer to design and safeguard AWS environments for a major transportation client. You will architect secure multi-account landing zones, enforce least-privilege IAM, and lead DevSecOps integration across CI/CD pipelines.

You will mentor engineers, perform threat modeling, and ensure compliance with standards like NIST, CIS, ISO 27001, SOC 2, PCI, and HIPAA while coordinating with cross-functional teams on security architecture.

Qualifications

• 7+ years in IT with 5+ years AWS cloud security experience.
• Deep knowledge of AWS security services and multi-account management.
• Proficiency in Terraform or CloudFormation and scripting languages.
• Experience implementing compliance standards (NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA).
• Ability to work independently and lead across teams; strong communication.
• On-site ability in Washington, DC.

Responsibilities

• Design and implement secure, multi-account AWS architectures and landing zones.
• Define security standards, governance, and automated guardrails.
• Lead threat modeling, risk assessments, and security reviews.
• Configure network security, VPCs, and IAM controls with least privilege.
• Drive DevSecOps integration into CI/CD with IaC tooling.
• Oversee CSPM, vulnerability management, and SIEM integrations.

Skills

AWS security

Multi-account AWS

DevSecOps

IaC (Terraform/CFN)

Scripting (Python/PowerShell/Bash)

Compliance standards (NIST/CIS/ISO 270

Zero Trust

Tools

Terraform

CloudFormation

IAM Identity Center

Security Hub

GuardDuty

Config

CloudTrail

KMS / Secrets Manager

Microsoft Sentinel

Job description

ZipStaff Inc. is seeking a Senior Cloud Security Engineer to design and safeguard AWS environments for a major transportation client. You will architect secure multi-account landing zones, enforce least-privilege IAM, and lead DevSecOps integration across CI/CD pipelines.

You will mentor engineers, perform threat modeling, and ensure compliance with standards like NIST, CIS, ISO 27001, SOC 2, PCI, and HIPAA while coordinating with cross-functional teams on security architecture.