Senior Cloud Security Engineer

Steampunk; Washington (District of Columbia); On-site; USD 100,000 - 155,000; Full time

Benefits offered by this job

AWS/Azure/GCP certifications

Tuition for certifications

Health insurance

Retirement plan

Job summary

Steampunk is hiring a Cloud Security Engineer to join our DevSecOps practice, delivering secure cloud architectures for migration, optimization, and deployment. You will work with stakeholders to balance security with usability and monitor cloud environments for threats.

You will design secure solutions, implement IaC, and collaborate with developers to enforce security processes, while developing documentation and security artifacts for compliance.

Qualifications

• Ability to obtain a U.S. government Security Clearance
• BS Degree in an IT field OR BS in a non-IT field and 2 years related IT experience
• 5 Years of Experience architecting, designing, developing, and implementing cloud solutions
• 5 Years of Experience with one or more clouds (AWS, Azure, or GCP)
• 5 Years of Experience with Git SCM providers such as GitHub, GitLab, Bitbucket
• 5 Years of Experience with systems development in an Agile environment
• 5 Years of Experience implementing infrastructure as code and orchestration
• 5 Years of Experience providing conducting monitoring, risk assessment, threat modeling and security testing in cloud environments
• 5 Years of Experience documenting POAMs, SSPs, and A&A support documentation

Responsibilities

• Identify and implement secure cloud-based solutions for customers, including zero-trust components
• Understand stakeholder needs and balance security with usability
• Monitor cloud environments for suspicious activity and investigate security incidents
• Examine infrastructure as code and analyze risk
• Ensure systems are safe against threats via risk assessment, threat modeling, and compliance
• Identify technical problems and develop fixes
• Automate vulnerability and patch management
• Collaborate with developers and DevSecOps engineers to enforce security processes
• Support enterprise cloud security through IaC and large-scale deployments
• Design and implement data protection and encryption for data at rest and in transit
• Document current state, perform gap analysis, and present options and recommendations
• Analyze vulnerabilities and deployment issues; implement improvements
• Provide status updates and cross-train team members

Skills

Cloud security architecture

Cloud platforms (AWS/Azure/GCP)

Security governance & risk mgmt

Agile + DevOps

Infrastructure as Code (IaC)

Threat modeling & security testing

POAMs/SSPs documentation

Monitoring & incident response

Scripting (Python/Bash/PowerShell)

Education

BS Degree in IT or related field; or BS in non-IT field + 2 years IT exp

Tools

Git SCM (GitHub/GitLab/Bitbucket)

Terraform

CloudFormation

Ansible

Concourse

Bash

PowerShell

Python

Job description

Steampunk is hiring a Cloud Security Engineer to join our DevSecOps practice, delivering secure cloud architectures for migration, optimization, and deployment. You will work with stakeholders to balance security with usability and monitor cloud environments for threats.

You will design secure solutions, implement IaC, and collaborate with developers to enforce security processes, while developing documentation and security artifacts for compliance.