AWS Cloud Security Engineer
Booz Allen Hamilton1 day ago
McLean, VA, USA or San Diego, CA, USAMid Level
H1B sponsor
Base Salary
$69k - $158k/yr
Responsibilities
- Assess AWS Organizations, accounts, landing zones, identity, networking, workloads, policies, Infrastructure as Code, and cloud security tooling.
- Develop secure configuration baselines, preventive guardrails, security policies, reusable security patterns, and implementation-ready technical documentation.
- Create reusable Terraform and Infrastructure as Code for AWS resources and automate cloud security controls.
- Review AWS identity and access management, network security, application architectures, and cloud governance.
- Collaborate with cloud platform teams, security stakeholders, application owners, governance teams, client leadership, architects, and engineers.
- Translate technical findings and requirements into scalable, repeatable AWS security engineering solutions.
Requirements
- At least 3 years of experience with AWS cloud engineering, cloud security, infrastructure engineering, DevSecOps, site reliability engineering, or enterprise cloud delivery.
- Experience with AWS Organizations, organizational units, multi-account environments, IAM, roles, policies, Service Control Policies, or cross-account access.
- Experience with AWS networking, including VPCs, subnets, security groups, routing, Transit Gateway, private connectivity, DNS, load balancing, and ingress or egress controls.
- Experience with AWS security and monitoring services such as CloudTrail, AWS Config, GuardDuty, Security Hub, KMS, IAM Access Analyzer, CloudWatch, Systems Manager, or AWS Inspector.
- Experience developing or reviewing Terraform, AWS CloudFormation, or Infrastructure as Code.
- Experience with scripting or automation using Python, Bash, PowerShell, AWS CLI, SDKs, APIs, or engineering tools.
- Experience assessing technical environments, identifying security or architecture gaps, and translating findings into recommendations, implementation steps, or technical documentation.
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or Information Systems.
- Preferred experience includes AWS IAM Identity Center, SAML, OIDC, permission sets, privileged access, enterprise federation, identity governance, AWS landing zones, AWS Control Tower, account vending, centralized logging, shared services, and enterprise AWS platform architectures.
- Preferred experience includes Wiz, Prisma Cloud, Orca Security, Lacework, CSPM or CNAPP technologies, CI/CD security integration, policy-as-code, NIST, CIS Benchmarks, ISO 27001, FedRAMP, Azure security, or Google Cloud security.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
- Recognition awards for exceptional performance and demonstration of company values.
- Full-time and part-time employees regularly working at least 20 hours per week are eligible for Booz Allen benefit programs, with select offerings for others.
- Work-model logistics vary by listing; virtual roles may require occasional in-person work, hybrid roles require work at a Booz Allen or customer facility according to leadership expectations, and onsite roles are primarily performed at a customer facility.
About Booz Allen Hamilton
Booz Allen Hamilton builds and integrates software, analytics, AI, cloud, and cybersecurity solutions while providing engineering and consulting services, primarily for U.S. defense, intelligence, and civil government clients, with select commercial partnerships. Its business is largely government contracting and professional services delivering mission systems and cyber defense. Founded in 1914 and headquartered in McLean, Virginia, Booz Allen is a public company traded on the NYSE (ticker: BAH).