> Markdown version of [/jobs/ext/4432422-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/4432422-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Engineer

- **Company:** Guidehouse Inc.
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $92,000.0 - $153,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Amazon Cloudfront, Amazon Elastic Compute Cloud, Amazon S3, Software System Penetration Testing, Audit Trail, Bash Shell, Cloud Computing Security, Cyber Security, DevOps, Github, Monitoring of Systems, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Key Management, Cloud Services, Datadog, Data Logging, Cloudformation, Build Management, Amazon Relational Database Service, Infrastructure Automation Frameworks, Information Technology, Deployment Automation, Sentry, Route53, Functional Programming, CIS Benchmarks, Terraform, Docker, Vulnerability Analysis
- **Published:** October 20, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=fdbb8162cae2d014

## About the Role

* U.S. Citizenship or Green Card required, with the ability to obtain a Public Trust clearance.
 * Bachelor's degree in computer science, cybersecurity, engineering, or a related field; four additional years of relevant experience may be substituted in lieu of a degree.
 * Minimum 6 years of relevant experience in cloud security, cybersecurity and AWS security.
 * Strong knowledge of AWS services, including EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53, IAM, CloudTrail, Config, and KMS.
 * Experience supporting secure CI/CD pipelines, deployment automation, build troubleshooting, release coordination, and developer enablement.
 * Collaborate Hands-on experience with GitHub Actions, AWS CodeBuild, ArgoCD, Helm, Docker, secrets management, environment configuration, and Terraform templates.
 * Ability to validate account handoffs, review pipeline configurations, verify secrets, support deployment dry runs, and assist with cutover and rollback planning.
 * Strong scripting or development experience with Python, Bash, or similar languages.
 * Proven ability to work independently and collaborate with cross-functional teams to solve complex security, operational, and reliability challenges.

What Would Be Nice To Have:

 * AWS Certified Security - Specialty (Highly desirable).
 * AWS Certified Solutions Architect or DevOps Engineer certifications.
 * CISSP, CISM or GIAC certifications.

## Description

* Design, implement, and maintain security controls across AWS cloud environments.
 * Safeguard cloud workloads by applying best practices for identity management, monitoring, threat detection, and secure operations.
 * Develop secure AWS architectures using services such as IAM, KMS, CloudTrail, Config, and supporting monitoring tools such as Sentry and Datadog.
 * Implement centralized logging, monitoring, alerting, threat modeling, vulnerability scanning, and penetration testing practices.
 * Ensure AWS environments align with applicable security and compliance frameworks, including CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2.
 * Support incident detection, investigation, and response while maintaining audit trails across AWS accounts and services.
 * Automate security controls and compliance checks using Infrastructure as Code tools such as Terraform and CloudFormation.
 * Integrate security into CI/CD pipelines and collaborate with engineering teams to enable secure build and deployment processes.