> Markdown version of [/jobs/ext/4034089-cloud-security-engineer-aws-ts-sci-on-site-scif](https://www.wearedevelopers.com/jobs/ext/4034089-cloud-security-engineer-aws-ts-sci-on-site-scif). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Engineer (AWS) - TS/SCI - On-Site SCIF

- **Company:** D9tech Resources LLC
- **Location:** Herndon, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing Security, Code Review, DevOps, Identity and Access Management, Cisco Nexus Switches, Cloud Services, SAP (Applications), Security Information and Event Management, Data Logging, Sonatype Nexus, OpenSearch, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** October 30, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9277373/cloud-security-engineer-aws-tssci-on-site-scif

## About the Role

Active TS/SCI clearance, eligible for SCI read-on/INDOC and SAP indoctrination where required

 - Live within commuting distance of a SCIF in Herndon, VA, Washington, DC, Seattle, WA or Denver, CO
 - Able and willing to work on-site in a SCIF on a regular basis, including at customer facilities
 - 5+ years in cybersecurity or security engineering, including 3+ years securing AWS environments
 - RMF/ATO experience in DoD or IC environments
 - Hands-on experience with AWS cloud services
 - Experience in air-gapped or classified environments with no public internet access and controlled change management (CCB)
 - DoD 8140/8570 IAT Level II or higher certification (e.g., Security+, CISSP) where applicable, Experience in AWS GovCloud and/or classified AWS regions (C2S/SC2S)
 - AWS Certified Solutions Architect, DevOps Engineer, Advanced Networking or Security Specialty
 - Nexus Repository and OpenSearch experience
 - CISSP

Reminder: On-site in a SCIF, customer-facing. Remote and hybrid candidates will not be considered.

## Description

D9Tech Resources, LLC is hiring in support of a national security cloud program. Secure and help authorize classified AWS environments. You will engineer IAM, KMS and logging guardrails, run security tooling, drive RMF/ATO work and close POA&M findings across mission projects. All work is performed on-site in a SCIF.

Responsibilities

 - Design IAM, KMS and logging guardrails for classified workloads
 - Administer and secure artifact repository services (Sonatype Nexus Repository)
 - Build and tune OpenSearch Dashboards as a SIEM and logging platform
 - Remediate POA&M items, including MFA implementation
 - Support NIST 800-53/RMF controls, STIG compliance and POA&M tracking
 - Produce and maintain ATO packages and documentation
 - Perform architecture and code reviews, vulnerability assessments and incident response support