> Markdown version of [/jobs/ext/1217617-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/1217617-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** The Sos - **Location:** Tucson, AZ, United States (Remote available) - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Cloud Computing Security, Cyber Security, Identity and Access Management, Role-Based Access Control, Zero Trust Network Access, Security Information and Event Management, Cloud Platform System, Plan of Action and Milestones, Vulnerability Analysis - **Published:** July 9, 2026 - **Apply:** https://www.juju.com/job/00000000get9t5 ## About the Role + Active Secret Clearance. + Bachelor's degree in Cybersecurity, Information Assurance, or a related field, OR five (5) years of equivalent experience in cloud security engineering. + Demonstrated experience in implementing cloud security frameworks, configuring identity and access management (IAM) solutions, and conducting vulnerability assessments in cloud environments. + Experience with SIEM tools, zero-trust architecture, and cloud security monitoring solutions is required. + Possess the knowledge and capability to implement security controls and frameworks within cloud environments, ensuring compliance with NIST 800-53 Rev. 5, FedRAMP, and DoD IL 2, 4, and 5 security policies. + Proficient in identity and access management (IAM), security monitoring, and cloud-native security solutions. Preferred Qualifications: + Certifications include CISSP, AWS Certified Security (Äì Specialty, or Microsoft Certified: Security, Compliance, and Identity Fundamentals. ## Description + Implement and maintain cloud security frameworks, ensuring compliance with NIST 800-53 Rev. 5, FedRAMP, and DoD IL-4/IL-5 security mandates. + Configure and manage Identity and Access Management (IAM) solutions, role-based access controls (RBAC), and Zero Trust Architecture (ZTA) principles. + Conduct vulnerability assessments, security monitoring, and incident response within cloud environments. + Develop and maintain System Security Plans (SSP), Security Assessment Reports (SAR), and Plans of Action & Milestones (POA&M). + Provide the Cloud Security Compliance & Risk Report, ensuring all cloud-based operations remain in accordance with DoD security requirements. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Containers in the cloud - State of the Art in 2022](https://www.wearedevelopers.com/videos/410-containers-in-the-cloud-state-of-the-art-in-2022) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cloud Vendor Lock-In - Is it just a new version of the Database Abstraction Layers?](https://www.wearedevelopers.com/videos/1185-cloud-vendor-lock-in-is-it-just-a-new-version-of-the-database-abstraction-layers) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Reliable scalability: How Amazon.com scales on AWS](https://www.wearedevelopers.com/videos/983-reliable-scalability-how-amazon-com-scales-on-aws) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)