Sr AWS Security Engineer

Aqua IT; Herndon (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Aqua IT in Herndon, VA is seeking a Security Architect with automation focus to develop reusable IaC and cross-account security integrations within a multi-vendor AWS environment.

Role involves assessing security posture, aligning with government standards, and coordinating with AWS, government, and vendor teams. TS/SCI clearance is required, with experience across distributed AWS accounts and cloud automation.

Qualifications

• Active TS/SCI clearance required.
• Experience with AWS cloud environments.
• Experience with Infrastructure as Code (IaC) and cloud automation.
• Experience with cloud security architecture, security controls, and/or security posture management.
• Experience working with multi-account or cross-account AWS environments.
• Familiarity with government security/compliance and authorization processes such as ATO/IATT.
• Ability to work across multiple technical teams, vendors, and government stakeholders.

Responsibilities

• Security Architecture & Automation — Develop reusable IaC and cross-account integrations to standardize security services across a complex, multi-vendor AWS environment.
• Develop and implement repeatable security solutions and automation across distributed AWS accounts.
• Support cross-account security integrations and centralized security capabilities across environments managed by multiple vendors.
• Security Compliance & Posture Management — Assess the current security posture of AWS environments and align implementations with security standards.
• Help shape and improve government security and compliance processes across the environment.
• Support the development of security and compliance artifacts for IATT and ATO activities.
• Integrate logging from distributed AWS accounts into centralized logging and review capabilities, including integration with the C5ISR reviewer.
• Collaborate with AWS, government, and vendor teams to address security integration and compliance requirements.

Skills

AWS

Security Architecture

Cloud automation

Multi-account AWS

IaC

Government compliance

Cross-team collaboration

Job description

• Security Architecture & Automation — Develop reusable Infrastructure as Code (IaC) and cross-account integrations to standardize and centralize security services across a complex, multi-vendor AWS environment with distributed AWS accounts under an externally managed organization.
• Develop and implement repeatable security solutions and automation across distributed AWS accounts.
• Support cross-account security integrations and centralized security capabilities across environments managed by multiple vendors.
• Security Compliance & Posture Management — Assess the current security posture of AWS environments and work with vendors and government stakeholders to align implementations with organizational security standards.
• Help shape and improve government security and compliance processes across the environment.
• Support the development of security and compliance artifacts for IATT and ATO activities.
• Integrate logging from distributed AWS accounts into centralized logging and review capabilities, including integration with the C5ISR reviewer.
• Collaborate with AWS, government, and vendor teams to address security integration and compliance requirements.

Basic Requirements

• Active TS/SCI clearance required.
• Experience working with AWS cloud environments.
• Experience with Infrastructure as Code (IaC) and cloud automation.
• Experience with cloud security architecture, security controls, and/or security posture management.
• Experience working with multi-account or cross-account AWS environments.
• Familiarity with government security/compliance and authorization processes such as ATO/IATT.
• Ability to work across multiple technical teams, vendors, and government stakeholders.

2026-09-14 Code AQI-000339 Type Full-Time City, State Herndon, VA; Denver, CO; Seattle, WA , Virginia Country United States