> Markdown version of [/jobs/ext/2620130-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/2620130-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** Booz Allen Hamilton Inc. - **Location:** Alexandria, VA, United States - **Experience:** Expert - **Salary:** $99,000.0 - $225,000.0 - **Contract:** Permanent contract - **Skills:** Agile Methodology, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Information Systems, Revision Control Systems, Infrastructure as a Service (IaaS), Information Security Management, Information Systems Security Architecture Professional, Network Connections, Oracle (Applications), Windows PowerShell, Red Hat Enterprise Linux, Cloud Services, Google Cloud, Cloud Platform System, IT Architecture, Gitlab, Git, SC Clearance, Computer Equipment, Information Technology, Oracle Cloud Infrastructure, Devsecops - **Published:** August 4, 2026 - **Apply:** https://justjobs.com/main/sendform/8/8/28176/1/17297756?backUrl=%2Fcareer%2F17297756%2FCloud-Security-Engineer-Virginia-Alexandria ## About the Role * 6+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans * 6+ years of experience with secure IT architecture and computing hardware and software * Experience working with Cloud technologies, including AWS, Azure, GCP, Oracle, or Infrastructure as a Service * Experience with incident monitoring and endpoint security * Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration * Experience supporting security reviews of software and system releases within a DevSecOps framework, and supporting recurring path-to-production software and system release activities * Experience with terminology, processes, and regulations of IT system A&A for the RMF * Secret clearance * HS diploma or GED * Ability to obtain a DoD 8570 or 8140 IAT Level II Certification within 90 days of hire date Nice If You Have: * Experience assessing and authorizing network connections * Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework * Experience with scripts, PowerShell, and Bash to provide automated scanning or monitoring solutions * Experience with code management tools such as Git or GitLab, in a team setting * Experience with Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems * Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles * Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems * Ability to work independently and as an integrated member of a project team * Possession of excellent verbal and written communication skills * TS/SCI clearance ## Description Define, communicate, and implement cybersecurity architecture and administration processes for Oracle Cloud Infrastructure (OCI), Amazon Web Services (AWS), and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains. Develop Risk Management Framework (RMF) body of evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain an Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guide (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization's Assessment and Authorization (A&A) objectives. Work without considerable direction. Mentor and supervise team members, as needed. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)