> Markdown version of [/jobs/ext/606598-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/606598-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** Booz Allen Hamilton Inc. - **Location:** Charlottesville, VA, United States - **Experience:** Experienced - **Salary:** $99,000.0 - $225,000.0 - **Contract:** Permanent contract - **Skills:** Agile Methodology, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Information Systems, Infrastructure as a Service (IaaS), Information Security Management, Information Systems Security Architecture Professional, Network Connections, Systems Development Life Cycle, Red Hat Enterprise Linux, Cloud Services, Cloud Platform System, IT Architecture, Computer Equipment, Information Technology, Devsecops - **Published:** June 18, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=7e9963e8a6e49b10 ## About the Role Do you have experience in Verification (System development task)?, Do you have a High school diploma or GED?, * 2+ years of experience securing computer systems, performing DoD authorization activities, and writing security plans * 2+ years of experience with secure IT architecture and computing hardware and software * Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service * Experience developing Body of Evidence for DoD Risk Management Framework (RMF) * Experience with scripts and Bash to provide automated scanning or monitoring solutions * Experience supporting security reviews of software and system releases within a DevSecOps framework supporting recurring path-to-production software and system release activities * Experience with terminology, processes, and regulations of IT system A&A for the RMF * Top Secret clearance * HS diploma or GED * Ability to obtain DoD Directive 8570 or 8140 Series IAT Level II Certification within 90 days of hire date Nice If You Have: * Experience assessing and authorizing network connections between on-premise and cloud * Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework * Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration * Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems * Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles * Experience developing Body of Evidence artifacts for Certification and Accreditation (C&A) of systems under frameworks, including National Institute of Standards and Technology (NIST) Special Publication (SP) 800-Series, DoD Risk Management Framework (RMF), and Intelligence Community Directive (ICD) 503 * Knowledge of terminology and federal regulations related to specification, development, acquisition, and maintenance of IT systems * Ability to work independently and as an integrated member of a project team * Possession of excellent verbal and written communication skills * TS/SCI clearance Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required. ## Description Define, communicate, and implement cybersecurity architecture and administration processes for cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to ensure design, implementation, verification, and continuous monitoring of cloud solutions across multiple domains. Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Amazon Web Services (AWS) operating within Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization's Assessment and Authorization (A&A) objectives. Work without considerable direction. Mentor and supervise team members, as needed. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)