> Markdown version of [/jobs/ext/4549644-aws-cloud-security-guardrails-engineer](https://www.wearedevelopers.com/jobs/ext/4549644-aws-cloud-security-guardrails-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AWS Cloud Security & Guardrails Engineer

- **Company:** Oxenham Group LLC
- **Location:** Herndon, VA, United States (Remote available)
- **Experience:** Expert
- **Salary:** $165,000.0 - $220,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cloud Computing Security, Identity and Access Management, Software Engineering, Data Logging, Cloud Platform System, Delivery Pipeline
- **Published:** November 3, 2026
- **Apply:** https://www.careerbuilder.com/job-details/aws-cloud-security-guardrails-engineer-herndon-va--f65cbfaf-3c6c-4963-816e-c60bca8938f0

## About the Role

Software Engineering, Cloud Computing, Amazon Web Services (AWS), Sensitive Compartmented Information (SCI), Top Secret Clearance, Security Design, Cryptography, Team Building, Amazon Web Services (AWS), Turning Center, * 5 or more years of engineering experience, at least 3 of them hands-on in AWS.

 * Deep working knowledge of AWS IAM, KMS, logging, and cloud security architecture.
 * A track record of checking technical builds against defined security requirements.
 * Ability to work well in a closely controlled operating environment.

Nice to Have

 * Security for infrastructure as code, or automated policy validation.
 * Hands-on support of formal security authorization efforts.
 * AWS Professional or Specialty certification. Security+ or CISSP is a plus.

Additional Requirements

 * Current, active TS/SCI. You must also qualify for SCI indoctrination and any program-level access approvals the customer requires.
 * U.S. citizenship is required under the terms of the government contract.
 * You must live within a reasonable daily commute of the secure site in Herndon, VA or Washington, DC.
 * Full-time and fully on-site in an accredited secure facility, with occasional visits to approved customer sites. Remote work is not an option.

## Description

A federal program team building secure AWS platforms is adding a security engineer who can help set the security design from day one. The work centers on turning security requirements into usable identity, encryption, and observability guardrails that development teams can build on without second-guessing.
What You Will Do

 * Build reusable security guardrails into deployment pipelines in partnership with engineering teams.
 * Assess cloud architectures and infrastructure code for security gaps.
 * Create and refine AWS IAM policies, KMS encryption controls, and centralized logging designs.
 * Help assemble evidence and documentation for security assessments.