Senior Cloud Security Engineer — DevSecOps Leader

Steampunk; Washington (District of Columbia); On-site; USD 130,000 - 180,000; Full time

Job summary

Steampunk is seeking a Senior Cloud Security Engineer to join our DevSecOps practice in Washington, DC. You will design secure cloud architectures for migration, optimization and deployment, including zero-trust, IAM policies, and data protection at rest and in transit.

Requirements include 5–8 years in cloud security, hands-on experience with AWS/Azure/GCP, IaC and automation, monitoring, risk assessment, threat modeling, and security testing.

Qualifications

• Eligible to obtain a U.S. government security clearance.
• 5 years of cloud security architecture experience.
• Experience with AWS, Azure, or GCP.
• Experience with IaC and orchestration.
• Experience monitoring, risk assessment, threat modeling and security testing in cloud.
• Experience documenting POAMs, SSPs, and A&A support.
• Strong communication and collaboration skills.

Responsibilities

• Identify and implement secure cloud-based solutions including zero-trust components.
• Collaborate with stakeholders to balance security and usability.
• Monitor cloud environments for suspicious activity and investigate incidents.
• Review infrastructure as code for risk and security alignment.
• Ensure data protection in transit and at rest with encryption controls.
• Automate vulnerability and patch management processes.
• Provide status updates and cross-train team members.

Skills

Cloud security engineering

DevSecOps

Threat modeling

Security incident response

Infrastructure as code

Automation scripting

Communication

Education

BS degree in IT or related field with 2 years IT experience

Tools

AWS

Azure

GCP

Git

Concourse

Bash

PowerShell

Python

Terraform

CloudFormation

Ansible

Job description

Steampunk is seeking a Senior Cloud Security Engineer to join our DevSecOps practice in Washington, DC. You will design secure cloud architectures for migration, optimization and deployment, including zero-trust, IAM policies, and data protection at rest and in transit.

Requirements include 5–8 years in cloud security, hands-on experience with AWS/Azure/GCP, IaC and automation, monitoring, risk assessment, threat modeling, and security testing.