> Markdown version of [/jobs/ext/172993-senior-aws-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/172993-senior-aws-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior AWS Cloud security Engineer - **Company:** ClearanceJobs Workforce Solutions - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Cloud Computing Security, Cyber Security, Continuous Integration, Federated Identity Management, Identity and Access Management, Information Security Management, Intrusion Detection and Prevention, Key Management, Role-Based Access Control, Security Software, S3 Bucket, Mitre Att&ck, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Gitlab-ci, Information Technology, Terraform, Devsecops - **Published:** May 13, 2026 - **Apply:** https://www.clearancejobs.com/jobs/8912973/senior-aws-cloud-security-engineer ## About the Role * AWS Expertise: Strong knowledge of AWS services and security architecture. * Automation Proficiency: Proven experience with Terraform and GitLab CI/CD strategies. * Framework Fluency: Familiarity with NIST, CIS, and MITRE ATT&CK. * Analytical Problem Solving: Strong capabilities in log processing, event analysis, and incident management. * Communication: Ability to explain complex technical concepts to non-technical stakeholders. * Integrity & Ownership: Demonstrated commitment to process improvement, technical integrity, and continuous learning. Required Education & Experience * Education: Bachelor's degree in Computer Science or Cybersecurity (or military service equivalent). * Experience: 5+ years securing AWS environments and 5+ years of general cybersecurity experience. * Certifications (Preferred): AWS Certified Security - Specialty preferred; CISSP or similar security certifications preferred. Clearance / Eligibility Requirements * Citizenship: U.S. Citizen. * Clearance: Must have the ability to obtain and maintain a Top Secret (TS) clearance. * Screening: Must be able to pass a background investigation/security screening (as required for federal environments). Travel & Work Environment * Work Model: Mostly remote. * Travel: Occasional travel to the Maryland customer site and/or company events (estimated up to ~5%). * Location Preference: Washington, DC metro strongly preferred. ## Description ClearanceJobs is seeking placement for our client for a Sr. Cloud Security Engineer (Federal) to support and secure an AWS GovCloud infrastructure for federal workloads. This role is ideal for a hands-on, technical leader and self-starter who can implement cloud security guardrails, automate threat detection, and manage end-to-end security across the CI/CD lifecycle in a highly regulated environment. Work Model: Mostly remote with occasional travel to the customer site in Maryland. Location Preference: Washington, DC metro strongly preferred. Essential Functions (What You'll Do) * Cloud Security Engineering: Design and implement security controls across AWS environments, including IAM, SCPs, VPC security, S3 bucket policies, and key management. * Infrastructure as Code (IaC): Use Terraform to deploy and manage security configurations, integrating Security as Code into all deployments. * DevSecOps Integration: Implement and maintain GitLab CI/CD pipelines for automated security testing and scanning of AWS resources. * Posture Management & Monitoring: Monitor and continuously improve cloud security posture; manage and tune GuardDuty, Security Hub, AWS WAF, and CloudTrail. * Identity & Access Management: Define and enforce IAM best practices (least privilege, federated identity, RBAC) and automate remediation of deficiencies. * Threat Modeling & Assessment: Conduct architecture reviews and risk assessments for new cloud features to identify and mitigate vulnerabilities before deployment. * Incident Response & Analysis: Investigate suspected attacks and lead security incident management, including post-mortems and long-term preventive measures. * Compliance & Standards: Develop and maintain security policies and procedures aligned to FedRAMP and DoD IL-4/5 requirements. * Reporting & Metrics: Build reporting mechanisms and metrics to communicate cloud risk and security trends to stakeholders and leadership. ## Related Videos - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026)