> Markdown version of [/jobs/ext/4020679-aws-cloud-security-consultant-identity-governance](https://www.wearedevelopers.com/jobs/ext/4020679-aws-cloud-security-consultant-identity-governance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AWS Cloud Security Consultant (Identity & Governance)

- **Company:** CLEAR DATA, INC.
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Cyber Security, Data Discovery, Global Positioning Systems (GPS), Identity and Access Management, Zero Trust Network Access, Okta, Cloudformation, Information Technology, Opsworks, Terraform, Plan of Action and Milestones
- **Published:** October 30, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9274870/aws-cloud-security-consultant-identity-governance

## About the Role

* AWS Certified Security - Specialty, CISSP, CCSP, or an equivalent GPS-approved certification
 * Proficient with AWS security services, especially IAM Identity Center, Organizations, Control Tower or LZA, KMS, and Config
 * Understanding of security frameworks (NIST, ISO, CIS), with at least one ATO supported end to end under RMF
 * DoD 8140-compliant baseline certification (e.g., Security+, CISSP)
 * Willing to complete annual AESP training, * CISM or CISA
 * JJSIG / ICD 503 or Special Access Program experience
 * Guardrails as code with Terraform, CloudFormation, or CDK
 * AWS GovCloud (US) or classified region experience
 * DoD Zero Trust architecture experience
 * No security clearance is required to start; an active Secret, Top Secret, or TS/SCI clearance is preferred, * B.S. in Computer Science, Information Security, or a related field, or equivalent professional experience (3+ years in security)
 * 2+ years working with AWS cloud platforms
 * This is a remote position
 * Please note that this specific position requires U.S. citizenship status

What is Important to Us:

 * You are an excellent communicator in writing and speaking.
 * You have the ability to work independently but also value teamwork.
 * Your problem-solving skills are excellent.
 * You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
 * You seek a community of virtue-centered co-workers and clients.

## Description

* Design and implement IAM across multi-account AWS environments: IAM Identity Center, least-privilege permission sets, roles, and cross-account access
 * Build governance guardrails with AWS Organizations, Control Tower, Landing Zone Accelerator, and Service Control Policies
 * Implement data protection controls: KMS key strategy, encryption at rest and in transit, Macie for sensitive data discovery, and classification aligned to customer policy
 * Stand up continuous compliance monitoring with AWS Config, Security Hub, Audit Manager, and CloudTrail, including automated audit evidence
 * Lead or support ATO packages under RMF (NIST 800-53), FedRAMP, DoD CC SRG, or JSIG, from control mapping through SSP and POA&M
 * Run Well-Architected Security Pillar reviews and security assessments, then turn findings into prioritized remediation plans
 * Integrate AWS identity with enterprise identity providers (Active Directory, Entra ID, Okta, CAC/PIV)