Senior Cloud Security Engineer — Hybrid (VA)

ExoStar; Herndon (VA); Hybrid; USD 130,000 - 170,000; Full time

Benefits offered by this job

Health insurance

Flexible time off

Training assistance

Job summary

Exostar is seeking a senior Security Engineer in Herndon, VA, to design and implement technical security controls across cloud, identity, and PKI environments. You will collaborate with DevOps, application, and operations teams to engineer controls and validate their effectiveness.

The role emphasizes secure architecture, threat modeling, and governance support for audits (SOC 2, ISO 27001). Strong communication and hands-on engineering with Jira/Confluence are required.

Qualifications

• 10+ years of hands-on experience evaluating secure architecture and implementing security controls in cloud environments.
• Experience evaluating system architecture, network diagrams, data flows, identity integrations, and technical design documentation.
• Experience performing threat modeling, technical risk assessments, security design reviews, and control gap assessments.
• Experience integrating security into the SDLC, including CI/CD pipelines, Agile delivery, and DevSecOps practices.
• Experience collaborating with engineering, infrastructure, DevOps, cloud, IAM, and operations teams to drive remediation to closure.
• Strong understanding of network security concepts, including segmentation, firewalls, proxies, DNS, TLS, VPN/IPSec, routing, ingress/egress control, and secure network design.
• Experience with identity and access technologies such as Active Directory, Entra ID/Azure AD, SAML, OIDC, MFA, privileged access, role-based access control, and identity federation.
• Demonstrated experience authoring technical control narratives, technical audit documentation, and supporting evidence.
• Experience supporting audits and assessments such as SOC 2, ISO 27001, etc.
• Strong written and verbal communication skills with the ability to explain technical concepts to auditors, leadership, and business stakeholders.
• Significant experience using Jira and Confluence.
• U.S. Citizens only- Due to customer requirements, U.S. Citizenship is required. Ability to gain and maintain Trusted Role is required.

Responsibilities

• Assess, design, and provide guidance on secure architecture for cloud environments, including IAM, PKI, access, network, and platform services.
• Engage directly with infrastructure, platform, and development teams to translate security requirements into implementable technical designs and controls.
• Review proposed system changes, architecture diagrams, network flows, identity integrations, and control implementations for security implications.
• Develop technical control implementation guidance, including diagrams, control narratives, configuration expectations, and test procedures.
• Provide hands-on engineering support for control effectiveness through configuration review, evidence inspection, technical testing, log review, and remediation verification.
• Perform threat modeling and security risk assessments and coordinate actionable mitigation strategies.

Skills

Secure architecture

Threat modeling

DevSecOps

Identity & access management

Cloud security

Network security

Audit support

Technical writing

Jira & Confluence

Team collaboration

US Citizenship

Education

Bachelor's degree in IT

Tools

Jira

Confluence

Job description

Exostar is seeking a senior Security Engineer in Herndon, VA, to design and implement technical security controls across cloud, identity, and PKI environments. You will collaborate with DevOps, application, and operations teams to engineer controls and validate their effectiveness.

The role emphasizes secure architecture, threat modeling, and governance support for audits (SOC 2, ISO 27001). Strong communication and hands-on engineering with Jira/Confluence are required.