Senior Cloud Security Engineer

Randstad Digital; Washington (District of Columbia); On-site; USD 103,000 - 117,000; Full time

Benefits offered by this job

Medical benefits

Prescription coverage

Dental insurance

Vision insurance

AD&D

Job summary

Randstad Digital in Washington, DC is seeking a Senior Cloud Security Engineer to design and safeguard robust AWS environments for a top-tier client. You will architect secure, multi-account solutions and lead DevSecOps integration while mentoring junior engineers.

The role emphasizes threat modeling, CSPM, incident response, and regulatory alignment with NIST/CIS/ISO SOC 2/PCI/HIPAA. Strong IaC experience with Terraform/CloudFormation and IAM is required.

Qualifications

• 7+ years of IT experience across infrastructure, networking, and OS management.
• At least 5 years hands-on AWS cloud infrastructure and application security.
• Deep knowledge of AWS security services and container security (ECS, EKS).
• Experience with IAM/IAM Identity Center and least-privilege design.
• Familiarity with NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA compliance.

Responsibilities

• Architecture & Strategy: Design secure, multi-account AWS architectures and landing zones using IAM and least-privilege principles.
• Security Guardrails & Governance: Define standards, governance, automated guardrails, threat modeling, risk assessments, and reviews.
• Network & Perimeter Defense: Configure VPCs, segmentation, private connectivity, AWS WAF, and security groups.
• Automation & DevSecOps: Drive IaC automation with Terraform/CloudFormation and embed DevSecOps in CI/CD.
• Posture Management & Operations: Manage CSPM, vulnerability management, and security tooling (Security Hub, GuardDuty, Config, CloudTrail).
• Compliance & Leadership: Align with NIST/CIS/ISO SOC 2/PCI/HIPAA; mentor engineers and lead cross-functional initiatives.

Skills

AWS Security

Terraform

CloudFormation

Python

PowerShell

Bash

Zero Trust

CSPM

SIEM

Multi-account AWS

Education

Bachelor's Degree

Tools

Terraform

CloudFormation

AWS IAM

Job description

job summary:

Randstad is seeking an experienced Senior Cloud Security Engineer to design, implement, and safeguard robust AWS cloud environments for our top-tier client in Washington, DC. In this high-visibility role, you will bring 7 years of broad IT expertise-including 5 years specializing in AWS infrastructure-to architect secure, highly resilient cloud solutions, establish security guardrails, and lead DevSecOps integration. You will serve as a subject matter expert in cloud threat modeling, regulatory compliance, and infrastructure automation, ensuring multi-account AWS environments adhere to Zero Trust principles while mentoring junior engineering staff.

location: Washington, Washington, D.C.

job type: Contract

salary: $75 – 85 per hour

work hours: 9am to 5pm

education: Bachelors

responsibilities

Architecture & Strategy: Design and implement secure, multi-account AWS cloud architectures, landing zones (Control Tower), and identity/access management solutions using AWS IAM and IAM Identity Center based on least-privilege principles.

Security Guardrails & Governance: Define cloud security standards, governance frameworks, and automated guardrails; lead threat modeling, risk assessments, and security architecture reviews across cloud applications and infrastructure.

Network & Perimeter Defense: Configure robust network security controls, including VPC architecture, network segmentation, private connectivity, AWS WAF, and security group policies.

Automation & DevSecOps: Drive end-to-end security automation using Infrastructure as Code (Terraform, CloudFormation) and partner with development and operational teams to embed DevSecOps controls into CI/CD pipelines.

Posture Management & Operations: Oversee vulnerability management, cloud security posture management (CSPM), SIEM integrations (such as Microsoft Sentinel), and threat remediation efforts using native tools like Security Hub, GuardDuty, Config, CloudTrail, KMS, and Secrets Manager.

Compliance & Leadership: Align cloud environments with industry frameworks (NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA), mentor junior cloud security engineers, and provide technical leadership across cross-functional teams.

qualifications

Experience: Minimum 7 years of broad IT experience across infrastructure, networking, and OS management, with at least 5 years of hands-on expertise dedicated to AWS cloud infrastructure and application security.

AWS Core Expertise: Deep knowledge of AWS security services, containerization security (ECS, EKS), Zero Trust architecture principles, and multi-account management.

Automation & Scripting: Strong hands-on proficiency with Infrastructure as Code (Terraform or CloudFormation) and scripting languages (Python, PowerShell, or Bash).

Compliance & Governance: Demonstrated experience implementing and enforcing compliance standards such as NIST, CIS, ISO 27001, SOC 2, PCI, or HIPAA.

Soft Skills: Proven ability to work independently, manage priority issues with urgency, drive collaborative solutions across integrated teams, and clearly communicate complex security concepts to key stakeholders.

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact

Pay offered to a successful candidate will be based on several factors including the candidate’s education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.