Senior Cloud Security Engineer — Federal Cloud Architect

DANASTAR Professional Services, LLC; Washington (District of Columbia); On-site; USD 140,000 - 190,000; Full time

Job summary

EastBay Systems seeks a Senior Cloud Security Engineer to lead cloud security architecture, secure Azure/AWS/hybrid environments, and ensure compliance with FISMA, RMF, FedRAMP, and Zero Trust. You will guide security engineering, IAM, and monitoring while collaborating with DevSecOps, SOC, and GRC teams.

Responsibilities include designing secure Landing Zones, enforcing baselines, and implementing CSPM/CWPP practices while shaping cloud governance in federal contexts.

Qualifications

• 8+ years of experience in cloud security engineering or cybersecurity engineering.
• 5+ years securing Azure and/or AWS environments.
• Experience with cloud networking, IAM, virtualization, storage, and infrastructure security.
• Experience implementing Entra ID, Conditional Access, PIM, IAM, and RBAC.
• Familiar with Azure Policy, AWS Config, cloud governance, and secure cloud architectures.
• Experience designing logging, monitoring, and security telemetry solutions.
• Strong leadership and communication skills for technical guidance.

Responsibilities

• Design secure Azure, AWS, and hybrid cloud architectures and reference models.
• Develop and enforce cloud security baselines and PPS standards.
• Lead cloud security engineering across identity, network, and monitoring domains.
• Collaborate with DevSecOps, SOC, and GRC to ensure compliant cloud platforms.
• Support FISMA/NIST/FedRAMP compliance activities and security assessments.

Skills

Cloud security engineering

Azure/AWS security

Cloud networking

Identity management

RBAC/PIM

CLI tools

Technical leadership

Education

Bachelor's degree in Computer Science or related field

Tools

Azure CLI

AWS CLI

PowerShell

Terraform

Kubernetes

OpenShift

Job description

EastBay Systems seeks a Senior Cloud Security Engineer to lead cloud security architecture, secure Azure/AWS/hybrid environments, and ensure compliance with FISMA, RMF, FedRAMP, and Zero Trust. You will guide security engineering, IAM, and monitoring while collaborating with DevSecOps, SOC, and GRC teams.

Responsibilities include designing secure Landing Zones, enforcing baselines, and implementing CSPM/CWPP practices while shaping cloud governance in federal contexts.