> Markdown version of [/jobs/ext/2271072-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/2271072-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** CACI International Inc. - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $103,800.0 - $218,100.0 - **Contract:** Permanent contract - **Skills:** Link Aggregation (Ethernet), Active Directory, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cloud Engineering, Cyber Security, Dynamic Host Configuration Protocol, File Systems, Domain Name System (DNS), Monitoring of Systems, Intrusion Detection Systems, Linux System Administration, Windows Servers, Networking Basics, Routing, Network Virtualization, Performance Tuning, Windows PowerShell, Quick EMUlator (QEMU), Role-Based Access Control, Ansible, Security Information and Event Management, TCP/IP, Virtual Local Area Networks, Virtual Machines, VirtualBox, Forensic Toolkit, Scripting, Virtual Environment, Firewalls (Computer Science), Git, Amazon Relational Database Service, Deployment Automation, Nutanix, Encase, Restful APIs, Veeam, Terraform, Commvault, Cisco, Security Orchestration, Automation & Response, Vmware - **Published:** August 27, 2026 - **Apply:** https://dejobs.org/x/x/045590B8F9094779A4F81F67BB5824B9/job/ ## About the Role Required: * An active Top Secret with SCI eligibility clearance. * 7+ years of relevant experience. * BA/BS or equivalent years of relevant experience. * DoD 8570/8140 IAT II baseline certification (e.g., CySA+, CND, Security+ CE, CCNA Security). * Strong Windows Server administration (2016/2019/2022), Active Directory, DNS, DHCP, RDS and GPO management. * Strong Linux administration knowledge including file systems, permissions, system monitoring, scripting, and RBAC. * Expertise in PowerShell scripting. * Familiarity with enterprise backup and DR tools (Veeam, Commvault) in HCI contexts. * Solid understanding of networking fundamentals (TCP/IP, VLANs, routing, LACP). * Proven capacity-planning, performance-tuning, and troubleshooting skills for HCI clusters. * Experience with Infrastructure as Code (Ansible, Terraform, Git) for provisioning and lifecycle management. Desired: * DoD 8570/8140 IAT III baseline certification (e.g., CISSP, CISM, CIS * Understanding of the RMF steps and ATO process. * Knowledge in Change Management process. * Experience in auditing procedures. * Experience with Nutanix virtual environments. ## Description * Deploy and manage Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Firewalls, virtual machines (VMDK, OVF, OVA, and QEMU), including cloud-based images (e.g., AMIs, Azure Virtual Machine Images), virtual networking (OVS, AWS, Azure, VMWare, Nutanix, Virtual Box), and physical networks (CISCO and Arista), as well as forensic tools (Encase, Axiom, etc.). * Identify, design, and deploy security solutions, leveraging both cloud-native and commercial off-the-shelf (COTS) technologies. This includes utilizing security tools such as Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), and Endpoint Detection and Response (EDR) solutions to ensure comprehensive security coverage across all infrastructures. * Monitor cluster health, capacity, and performance; tune settings to optimize resource utilization. * Automate provisioning, patching, and reporting workflows via PowerShell, REST API, Ansible, and Terraform. * Conduct disaster-recovery drills, validate restore procedures, and maintain job guides/runbooks. * Assist with investigation of security incidents; recommend and implement solutions to remediate or mitigate. * Apply Security Technical Implementation Guides (STIGs) to virtualized systems to maintain compliance with security standards and regulations. * Mentor and train junior team members on HCI and virtualization best practices. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)