Sr AWS Security Engineer

Aqua IT; Virginia (MN); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Aqua IT is seeking a Security Architect to design and implement scalable security architectures across a multi-account AWS landscape. The role emphasizes automation, IaC development, and centralized security services across vendor-managed environments.

The ideal candidate will have TS/SCI clearance, strong AWS experience, and a track record of cross-team collaboration with government stakeholders and multiple vendors.

Qualifications

• Experience with cloud security architecture and controls.
• Experience with multi-account or cross-account AWS environments.
• Familiarity with government security/compliance and authorization processes (ATO/IATT).

Responsibilities

• Develop reusable IaC and cross-account security integrations.
• Assess and improve security posture across distributed AWS environments.
• Collaborate with vendors, government stakeholders and technical teams.

Skills

Security architecture

Automation

Cross-account AWS

Team collaboration

Cloud security controls

Education

Bachelor's degree in a technical field

Tools

AWS

Terraform

CloudFormation

CI/CD tooling

Job description

• Security Architecture & Automation — Develop reusable Infrastructure as Code (IaC) and cross-account integrations to standardize and centralize security services across a complex, multi-vendor AWS environment with distributed AWS accounts under an externally managed organization.
• Develop and implement repeatable security solutions and automation across distributed AWS accounts.
• Support cross-account security integrations and centralized security capabilities across environments managed by multiple vendors.
• Security Compliance & Posture Management — Assess the current security posture of AWS environments and work with vendors and government stakeholders to align implementations with organizational security standards.
• Help shape and improve government security and compliance processes across the environment.
• Support the development of security and compliance artifacts for IATT and ATO activities.
• Integrate logging from distributed AWS accounts into centralized logging and review capabilities, including integration with the C5ISR reviewer.
• Collaborate with AWS, government, and vendor teams to address security integration and compliance requirements.

Basic Requirements

• Active TS/SCI clearance required.
• Experience working with AWS cloud environments.
• Experience with Infrastructure as Code (IaC) and cloud automation.
• Experience with cloud security architecture, security controls, and/or security posture management.
• Experience working with multi-account or cross-account AWS environments.
• Familiarity with government security/compliance and authorization processes such as ATO/IATT.
• Ability to work across multiple technical teams, vendors, and government stakeholders.

2026-09-14 Code AQI-000339 Type Full-Time City, State Herndon, VA; Denver, CO; Seattle, WA , Virginia Country United States