Senior Cloud Security Engineer

ZipStaff Inc.; Washington (District of Columbia); On-site; USD 165,000 - 248,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

401(k) + 401(k) matching

Paid time off

Referral Program

Job summary

ZipStaff Inc. is seeking a Senior Cloud Security Engineer to design and safeguard AWS environments for a major transportation client. You will architect secure multi-account landing zones, enforce least-privilege IAM, and lead DevSecOps integration across CI/CD pipelines.

You will mentor engineers, perform threat modeling, and ensure compliance with standards like NIST, CIS, ISO 27001, SOC 2, PCI, and HIPAA while coordinating with cross-functional teams on security architecture.

Qualifications

• 7+ years in IT with 5+ years AWS cloud security experience.
• Deep knowledge of AWS security services and multi-account management.
• Proficiency in Terraform or CloudFormation and scripting languages.
• Experience implementing compliance standards (NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA).
• Ability to work independently and lead across teams; strong communication.
• On-site ability in Washington, DC.

Responsibilities

• Design and implement secure, multi-account AWS architectures and landing zones.
• Define security standards, governance, and automated guardrails.
• Lead threat modeling, risk assessments, and security reviews.
• Configure network security, VPCs, and IAM controls with least privilege.
• Drive DevSecOps integration into CI/CD with IaC tooling.
• Oversee CSPM, vulnerability management, and SIEM integrations.

Skills

AWS security

Multi-account AWS

DevSecOps

IaC (Terraform/CFN)

Scripting (Python/PowerShell/Bash)

Compliance standards (NIST/CIS/ISO 270

Zero Trust

Tools

Terraform

CloudFormation

IAM Identity Center

Security Hub

GuardDuty

Config

CloudTrail

KMS / Secrets Manager

Microsoft Sentinel

Job description

Job Title: Senior Cloud Security Engineer.

Location: Washington, DC (On-site).

Employment Type: Contract (W2 through ZipStaff — No C2C or 1099).

About the Opportunity:

ZipStaff is seeking an experienced Senior Cloud Security Engineer to design, implement, and safeguard robust AWS cloud environments for a major transportation organization.

In this high-visibility role, you will architect secure, highly resilient cloud solutions, establish security guardrails, and lead DevSecOps integration. You will serve as a subject matter expert in cloud threat modeling, regulatory compliance, and infrastructure automation, ensuring multi-account AWS environments adhere to Zero Trust principles while mentoring junior engineering staff.

What You’ll Do:

• Design and implement secure, multi-account AWS cloud architectures, landing zones (Control Tower), and identity/access management solutions using AWS IAM and IAM Identity Center based on least-privilege principles.
• Define cloud security standards, governance frameworks, and automated guardrails; lead threat modeling, risk assessments, and security architecture reviews across cloud applications and infrastructure.
• Configure robust network security controls, including VPC architecture, network segmentation, private connectivity, AWS WAF, and security group policies.
• Drive end-to-end security automation using Infrastructure as Code (Terraform, CloudFormation) and partner with development and operational teams to embed DevSecOps controls into CI/CD pipelines.
• Oversee vulnerability management, cloud security posture management (CSPM), SIEM integrations (such as Microsoft Sentinel), and threat remediation efforts using native tools like Security Hub, GuardDuty, Config, CloudTrail, KMS, and Secrets Manager.
• Align cloud environments with industry frameworks (NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA), mentor junior cloud security engineers, and provide technical leadership across cross-functional teams.

Required Qualifications:

• Minimum 7 years of broad IT experience across infrastructure, networking, and OS management, with at least 5 years of hands-on expertise dedicated to AWS cloud infrastructure and application security.
• Deep knowledge of AWS security services, containerization security (ECS, EKS), Zero Trust architecture principles, and multi-account management.
• Strong hands‑on proficiency with Infrastructure as Code (Terraform or CloudFormation) and scripting languages (Python, PowerShell, or Bash).
• Demonstrated experience implementing and enforcing compliance standards such as NIST, CIS, ISO 27001, SOC 2, PCI, or HIPAA.
• Proven ability to work independently, manage priority issues with urgency, drive collaborative solutions across integrated teams, and clearly communicate complex security concepts to key stakeholders.
• Ability to work on‑site in Washington, DC.

Preferred Qualifications:

• Prior experience designing multi‑account AWS environments with Control Tower and IAM Identity Center.
• Hands‑on work embedding DevSecOps controls into CI/CD pipelines and leading threat modeling or security architecture reviews.
• Background mentoring junior cloud security engineers in an enterprise or transportation environment.
• Experience with SIEM integrations (such as Microsoft Sentinel) and advanced CSPM or vulnerability management tools.

Benefits:

• Health Insurance.
• Dental Insurance.
• Vision Insurance.
• 401(k) + 401(k) matching.
• Paid time off.
• Referral Program.

About ZipStaff:

ZipStaff partners with leading organizations to connect skilled technology professionals with high‑impact contract opportunities. We focus on quality matches, clear communication, and long‑term success for candidates and clients.