> Markdown version of [/jobs/ext/1992243-aws-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/1992243-aws-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # AWS Cloud / Security Engineer - **Company:** ECS Federal, LLC. - **Location:** Stafford, VA, United States - **Contract:** Permanent contract - **Skills:** Agile Methodology, Amazon Web Services, Amazon Elastic Compute Cloud, Bash Shell, Cloud Computing, Cloud Computing Security, Cloud Engineering, Identity and Access Management, Local Security Policy, Windows PowerShell, Scripting, Amazon Virtual Private Cloud (VPC), Git, Cloudformation, SC Clearance, Kubernetes, Software Version Control, Plan of Action and Milestones - **Published:** August 8, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/aws-cloud-security-engineer-22555-stafford-va-usa-58859915 ## About the Role using OS baselines, and application platforms. * Design and maintain least-privilege IAM roles and policies; remediate findings from IAM Access Analyzer, Security Hub, GuardDuty, and Config. * Implement NIST SP 800-53 controls in the cloud and document satisfaction within RMF/ATO processes. * Contribute to ATO package content (SSP narratives, control statements, diagrams, inventory artifacts). * Support security assessments with evidence, respond to assessor questions, and drive POA&M to closure. * Participate in Agile ceremonies, refine infrastructure and security stories, and provide sprint estimates. * Troubleshoot environment and pipeline issues with documented root cause and repeatable fixes. Tasks * Active Secret clearance * Hands-on AWS experience administering EC2, IAM, VPC, and AMIs * Experience implementing security settings and hardening across cloud and OS layers * Familiarity with NIST SP 800-53 controls and RMF/ATO processes, including security documentation and POA&M aaaaaaa from * Kubernetes and container image experience * Git-based version control across multiple projects * Security+ certification or ability to obtain within 6 months * System administration experience * Strong attention to detail and troubleshooting ability * Scripting proficiency (PowerShell or Bash preferred) Key requirements * ## Description Experteer Overview In this role you will design, build, and secure cloud infrastructure to support CODIS development across AWS environments. You will partner with cross-functional teams to keep Dev and Test stable and compliant, while implementing security controls and automated provisioning. You will contribute to security documentation and assessment evidence for ATO processes and NIST controls. The position blends hands-on cloud engineering with regulatory compliance in a mission-critical federal context. Compensation / Benefits * Design, build, and maintain AWS infrastructure (EC2, IAM, VPC, security groups, AMI lifecycle) for development, test, pre-prod, and prod. * Provision and manage infrastructure as code using CloudFormation. * Collaborate with CODIS development and infrastructure teams to ensure stability and availability of environments. * Provide off-hours support for system upgrades, patches, and maintenance as needed. * Implement and validate security settings across cloud, OS baselines, and application platforms. * Design and maintain least-privilege IAM roles and policies; remediate findings from IAM Access Analyzer, Security Hub, GuardDuty, and Config. * Implement NIST SP 800-53 controls in the cloud and document satisfaction within RMF/ATO processes. * Contribute to ATO package content (SSP narratives, control statements, diagrams, inventory artifacts). * Support security assessments with evidence, respond to assessor questions, and drive POA&M to closure. * Participate in Agile ceremonies, refine infrastructure and security stories, and provide sprint estimates. * Troubleshoot environment and pipeline issues with documented root cause and repeatable fixes. Tasks * Active Secret clearance * Hands-on AWS experience administering EC2, IAM, VPC, and AMIs * Experience implementing security settings and hardening across cloud and OS layers * Familiarity with NIST SP 800-53 controls and RMF/ATO processes, including security documentation and POA&M remediation * Kubernetes and container image experience * Git-based version control across multiple projects * Security+ certification or ability to obtain within 6 months * System administration experience * Strong attention to detail and troubleshooting ability * Scripting proficiency (PowerShell or Bash preferred) Key requirements * ## Related Videos - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)