Senior AWS Security Engineer - Cloud Risk & IAM Expert

Peraton; Herndon (VA); On-site; USD 86,000 - 138,000; Full time

Job summary

Peraton is seeking an AWS Security Engineer to safeguard our cloud infrastructure across the US. You will implement IAM, KMS, GuardDuty, CloudTrail, and Config Rules, build IaC with Terraform, and strengthen CI/CD security in collaboration with Cloud Engineering and DevOps teams.

You will conduct threat modeling, incident response, and audits, maintain security documentation, and ensure compliance with NIST, FISMA and FedRAMP while supporting 24/7 production environments.

Qualifications

• 8+ years with BS/BA OR 6+ years with MS/MA OR 12 years with HS or equivalent
• 6+ years in cloud security or cybersecurity
• Proficient in scripting languages like Python and Bash
• Hands-on experience with ECS, EKS, EC2, Lambda
• Proficient in Git and CI/CD pipelines
• Strong Terraform proficiency, writing modules, variables and workspaces
• Deep knowledge of AWS security services including IAM, KMS, GuardDuty, Security Hub, CloudTrail and Config Rules
• Perform IAM policy and permissions audits to enforce least privilege
• Read and interpret access logs, cloud account configurations and IAM policies
• Strong written and verbal communication for technical and non-technical stakeholders
• Excellent analytical and problem-solving skills
• Must be a US Citizen
• Must be able to obtain and maintain a Public Trust clearance
• Preferred: AWS Cloud Practitioner, Security Specialty; security compliance or audit certification

Responsibilities

• Lead and support vulnerability scanning and remediation for cloud resources
• Strong understanding of IAM Roles/Policies and Identity Federation, Encryption, KMS, secrets management
• Provision and manage AWS infrastructure using Terraform IaC
• Write scripts for CloudWatch metrics and alarms
• Implement alerting and remediation automation
• Assist in incident response, investigations and root cause analysis
• Develop and maintain security architecture documentation and runbooks
• Run AWS security posture assessments with automated tools
• Experience with AWS cloud security monitoring and detection tooling
• Embed security in CI/CD pipelines and IaC across teams
• Implement and improve AWS security controls, guardrails and baselines
• Continuously evaluate environments for cost-effective security improvements
• Conduct threat modeling, vulnerability analysis and remediation coordination
• Support audits by gathering evidence and validating configurations
• Maintain cloud compliance with NIST, FISMA and FedRAMP
• Assist in risk assessments and security control testing
• Support change control and accurate ownership documentation
• Evaluate merging cloud security tools and recommend enhancements
• Keep environments compliant with security standards
• Participate in on-call rotations for 24/7 production support

Skills

Python

Bash

ECS

EKS

EC2

Lambda

Git

CI/CD pipelines

Terraform

IAM

KMS

GuardDuty

Security Hub

CloudTrail

Config Rules

IAM policy audits

Least privilege

communication

problem-solving

Education

BS/BA in a relevant field

MS/MA in a relevant field

HS Diploma/equivalent with 12+ years of experience

Tools

Terraform

Git

CI/CD

Job description

Peraton is seeking an AWS Security Engineer to safeguard our cloud infrastructure across the US. You will implement IAM, KMS, GuardDuty, CloudTrail, and Config Rules, build IaC with Terraform, and strengthen CI/CD security in collaboration with Cloud Engineering and DevOps teams.

You will conduct threat modeling, incident response, and audits, maintain security documentation, and ensure compliance with NIST, FISMA and FedRAMP while supporting 24/7 production environments.