> Markdown version of [/jobs/ext/3960721-cloud-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/3960721-cloud-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Cyber Security Engineer - **Company:** Nabout Leidos - **Location:** United States - **Experience:** Expert - **Salary:** $131,300.0 - $237,350.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Systems Engineering, User Authentication, Cloud Computing, Cyber Security, Computer Networks, System Configuration, Identity and Access Management, Information Systems Security Engineering Professional, Key Management, Network Security, Public Key Infrastructure, Systems Development Life Cycle, Red Hat Enterprise Linux, Security Content Automation Protocol, Security Information and Event Management, Data Streaming, Oracle Linux, Software Vulnerability Management, Istio, Kubernetes, Information Technology, Tools for Reporting, Prisma Cloud Platform, Splunk, Microservices - **Published:** October 27, 2026 - **Apply:** https://jobs.military.com/career/379404/senior-security-architect-maryland-md-bethesda ## About the Role * Clearance: Active or current Top Secret/SCI and the ability to obtain Polygraph\n * Bachelor of Science degree from an accredited university ideally in Computer Science, Information Assurance, Information Security System Engineering or related field with a minimum of 12 years of experience as an Information Systems Security Engineer (ISSE) or System Engineer on programs and/or contracts with the customer space.\n * Certification: At least one IAT and one IAT Level II or higher certification e.g., CCNA Security, CySA+, Security+ CE, CISSP (or Associate) and the ability to obtain Privileged User Account (PUA)/elevated access per DoD policy.\n * Must have a solid understanding of security practices and policies and hands-on vulnerability testing experience using Customer tools.\n * Must have experience applying Risk Management Framework.\n * Must have demonstrated knowledge of and experience with common security tools, such as ACAS, Prisma Cloud, and Splunk/Elastic.\n * Experience with SCAP or STIG based tools and specifications.\n * Extensive experience designing enterprise security solutions and translating security requirements into implementable technical architectures.\n * Knowledge of Kubernetes and container security architectures, including image security, admission controls, secrets, identity, network policies, software supply chain security, and runtime protection.\n * Experience designing solutions involving SIEM, vulnerability management, identity security, network security, secrets management, container scanning, and data protection technologies.\n * Monitor system security status, identify risks and vulnerabilities, and coordinate remediation efforts with system owners, engineers, and other stakeholders.\n * Experience with data modeling and mapping system data flows for the purpose of cybersecurity analysis.\n * Understanding of microservices architecture and service mesh.\n, * Experience with Commercial Cloud Services (C2S) and cloud-based enterprise services, preferably AWS\n * Five (5) years of experience with Defense in Depth Principals/technology (including access control, authorization, identification and authentication, public key infrastructure, network and enterprise security architecture) and applying risk assessment methodology to system development.\n * DoD 8570 compliance with IASAE Level 2 or 3.\n * Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools such as Trellix/ESS, ACAS, Evaluate STIG, SteelCloud ConfigOS, Prisma Cloud and STIG Manager.\n * Extensive experience hardening modern operating systems, such as Oracle Linux and RHEL, as well as Microsoft Windows environments using Security Technical Implementation Guides (STIGs).\n * Information Systems Security Engineering Professional (ISSEP) Certification.\n * Computer Information Systems Security Professional (CISSP) Certification.\n * Design and Architecture: Design, implement, and maintain Splunk environments including forwarders, indexers, search heads, and deployment servers.\n * Hands-on experience with two or more of the following technologies: Palo Alto Prisma Cloud, Splunk, Elastic, or Evaluate Stig. \n