Sr. Security Engineer
Role summary
We are seeking a Senior Security Engineer to join our team as a 3-month contract with potential for extension. This role focuses on building and maintaining a FedRAMP-aligned cloud environment within AWS GovCloud. You will be a hands-on technical resource, responsible for implementing secure, compliant infrastructure, configuring core AWS services, and managing containerized applications. The position requires strong experience with AWS, Terraform, and working within regulated environments, including navigating GovCloud specifics. Familiarity with compliance standards like FedRAMP and CMMC is essential. This role is critical for ensuring the security and compliance of our cloud infrastructure.
Job Overview:
We are seeking a Senior Security Engineer to support the buildout of a FedRAMP-aligned cloud environment within AWS GovCloud. This individual will serve as a hands-on technical resource, working closely with distributed teams to implement secure, compliant infrastructure and navigate the nuances of regulated cloud environments. This role requires a strong blend of AWS infrastructure, cloud security, and compliance experience, with the ability to operate independently and contribute immediately.
Job Type:
Starting as a 3 month contract with strong potential to extend
Key Responsibilities:
- Support the design, implementation, and maintenance of a FedRAMP-aligned AWS environment
- Serve as a hands-on engineering resource within AWS GovCloud, ensuring secure configurations and adherence to compliance requirements
- Collaborate with global engineering teams to translate requirements into secure, scalable solutions
- Implement and manage infrastructure using Infrastructure as Code (IaC) tools
- Configure and manage core AWS services including networking, compute, and identity services
- Navigate and address limitations specific to GovCloud environments versus commercial AWS
- Assist in building and maintaining security controls aligned with FedRAMP and/or CMMC standards
- Troubleshoot and optimize cloud infrastructure with a focus on security and compliance
Required Qualifications:
- Strong experience with AWS cloud services, including EC2, VPC, and IAM
- Hands-on experience with Terraform for infrastructure provisioning
- Experience working within AWS GovCloud environments
- Understanding of AWS networking and security best practices
- Familiarity with containerization and Kubernetes (EKS, Helm)
- Experience with AWS Organizations, Identity Center (SSO), and Service Control Policies
- Proven ability to work in regulated environments with security and compliance considerations
- U.S. Citizenship required
Preferred Qualifications:
- Experience supporting or working within FedRAMP or CMMC-compliant environments
- Familiarity with AWS CloudFormation and Service Catalog
- Experience with OpenShift
- Experience with HashiCorp Vault or similar secrets management tools
- Prior experience supporting Authority to Operate (ATO) or similar compliance processes
Similar roles
Staff Security EngineerPivotal Health · Los Angeles, California, United States · Hybrid- Security EngineerLawrence Harvey · Toronto, Ontario, Canada · Hybrid
- Security EngineerARQ · New York, New York, United States · Remote
Security EngineerAP Professionals · United States · Remote- Senior Security EngineerSystems Integration Solutions · Cupertino, California, United States · Onsite
