Cloud Security Engineer

We are seeking an experienced AWS Cloud Platform & Security Engineer to design, secure, and operate mission-critical cloud environments supporting government programs at Redstone Arsenal. This role blends AWS platform engineering, cloud security, DevSecOps automation, and Linux-based tooling, with a strong emphasis on building secure, scalable, and resilient cloud foundations. You will play a key role in establishing AWS secure baselines, automating infrastructure and security controls, and leading application migrations from on-prem environments to AWS.

What You'll Do

Design and build secure AWS cloud platforms and service delivery patterns, primarily across PaaS and IaaS Establish AWS secure baselines / landing zones, including guardrails, governance standards, and baseline architectures Automate infrastructure and security controls using DevSecOps practices, Infrastructure as Code (IaC), and CI/CD pipelines Assess existing applications and lead migrations from on-prem to AWS (rehost, replatform, refactor) Integrate security controls into CI/CD pipelines, including IaC scanning, secrets detection, and policy enforcement Design architectures for high availability (HA), disaster recovery (DR), and cost optimization Develop and maintain Linux-based automation and security tooling supporting enterprise cybersecurity infrastructure Partner with engineering, security, and operations teams to ensure compliance and mission readiness

Active Top Secret clearance

Strong hands-on experience designing and securing AWS cloud environments Experience building and enforcing cloud security guardrails and governance Proficiency with Infrastructure as Code (Terraform, CloudFormation, and/or CDK) Experience with CI/CD pipelines and DevSecOps automation Solid Linux administration background with automation/scripting experience Experience supporting or executing on-prem to AWS migrations Understanding of HA/DR architectures and AWS cost optimization strategies

Preferred / Nice to Have

AWS certifications (Solutions Architect, Security Specialty, DevOps Engineer) Scripting experience with Python and/or Bash Experience with security tooling such as CSPM, policy-as-code, or compliance automation Experience in classified or regulated environments