> Markdown version of [/jobs/ext/2713295-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/2713295-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Engineer

- **Company:** ONTIC PARTNERS LLC
- **Location:** Austin, TX, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Software as a Service, Cloud Computing, Cloud Computing Security, Continuous Integration, DevOps, Information Systems Security Architecture Professional, Scripting, Cloud Monitoring, Infrastructure Automation Frameworks, Terraform, Security Orchestration, Automation & Response
- **Published:** September 4, 2026
- **Apply:** https://startup.jobs/senior-cloud-security-engineer-ontic-co-9497595

## About the Role

* AWS cloud security expertise required.
 * Direct FedRAMP Moderate or High experience preferred.
 * Knowledge and understanding of FedRAMP CR-26 and/or 20x preferred.
 * AWS Bedrock experience preferred.
 * Infrastructure as code, with Terraform preferred.
 * Security automation and scripting.
 * CI/CD security integration.
 * Cloud detection and monitoring.
 * Experience supporting regulated SaaS environments and cloud compliance initiatives.
 * Occasional travel to Austin TX (Ontic HQ) is required

## Description

Ontic is seeking a Senior Cloud Security Engineer to lead the maturation of our AWS cloud security program. This role will assess, design and automate security controls, partner closely with Engineering and DevOps teams, and build the technical foundation required for continuous compliance, FedRAMP readiness, and secure cloud operations. This is an individual contributor role focused on building scalable security capabilities-not simply operating security tools., * Design and implement cloud security controls across AWS.

 * Build security automation using infrastructure as code, APIs, and scripting.
 * Lead cloud security posture management and continuous improvement.
 * Integrate security into CI/CD pipelines and engineering workflows.
 * Develop continuous evidence collection supporting FedRAMP and other continuous compliance initiatives.
 * Partner with engineering teams on secure architecture and cloud best practices.
 * Improve cloud monitoring, detection, and security metrics.
 * Support customer security requirements and compliance initiatives, including SOC 2, ISO 27001, and FedRAMP.

Success Criteria

 * Cloud security controls are automated, repeatable and auditable.
 * Continuous evidence collection reduces manual audit effort.
 * Security is embedded into engineering workflows.
 * AWS security posture improves through measurable automation and engineering-driven controls.
 * Ontic is positioned to mature toward modern FedRAMP continuous authorization practices.


## Related Videos

- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers)
- [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)