Senior Cloud Security Architect — Zero-Trust & IAM Leader

Steampunk, Inc.; Washington (District of Columbia); On-site; USD 130,000 - 180,000; Full time

Job summary

Steampunk is seeking a Senior Cloud Security Engineer to advance our DevSecOps practice. You will design secure cloud architectures for migration, optimization and deployment, and work with developers to embed security into CI/CD and IaC pipelines.

The ideal candidate has 5–8 years of cloud security and DevSecOps experience, strong scripting and automation skills, and a focus on risk assessment and compliance with standards. This role is based in Washington, DC.

Qualifications

• 5+ years of experience architecting, designing, developing, and implementing cloud solutions.

Responsibilities

• Identify and implement secure cloud-based solutions including zero-trust components.
• Understand stakeholder needs and balance security with usability.
• Monitor cloud environments for threats and investigate incidents.
• Analyze risk in infrastructure as code written by others.
• Ensure compliance with industry standards (NIST, ISO 27011, HIPAA, FISMA).
• Perform root cause analysis and implement fixes for vulnerabilities.
• Automate security processes such as vulnerability and patch management.
• Collaborate with developers to ensure security processes are followed.
• Support enterprise cloud security through IaC and large-scale deployments.
• Design and implement data protection/encryption for data at rest and in transit.
• Document current state, perform gap analysis, and produce options/recommendations.
• Identify, analyze, and resolve infrastructure vulnerabilities and deployment issues.
• Provide continuous improvement recommendations and present status updates.

Skills

Cloud security

DevSecOps

Infrastructure as code

Threat modeling

Security monitoring

Risk assessment

POAMs/SSPs

Compliance (NIST/ISO/HIPAA)

Education

Bachelor's degree in IT or related field

Tools

Git (GitHub/GitLab/Bitbucket)

Concourse

Bash

PowerShell

Python

Groovy

Ruby

Terraform

CloudFormation

Ansible

Job description

Steampunk is seeking a Senior Cloud Security Engineer to advance our DevSecOps practice. You will design secure cloud architectures for migration, optimization and deployment, and work with developers to embed security into CI/CD and IaC pipelines.

The ideal candidate has 5–8 years of cloud security and DevSecOps experience, strong scripting and automation skills, and a focus on risk assessment and compliance with standards. This role is based in Washington, DC.