AWS Cloud Security Engineer - Cleared
statera systems solutionsBaltimore (MD)
AWS Cloud Security Engineer - Cleared
Posted 4 days ago
statera systems solutionsBaltimore (MD)
SENIORITY
Lead
About the role
Description:
Triple-S is seeking a skilled AWS Security Engineer to design, implement, and maintain secure cloud architectures within AWS. This role is responsible for strengthening cloud security posture, implementing preventative and detective controls, and ensuring compliance with organizational and regulatory requirements. The ideal candidate combines deep AWS technical knowledge with a strong security engineering mindset. The position is 100% onsite and full-time, Monday-Friday with standard office hours.
Requirements
Key Responsibilities:
- Design and implement secure AWS architectures aligned with security best practices
- Configure and manage IAM policies, roles, and permission boundaries using least-privilege principles
- Implement and manage security services such as AWS GuardDuty, Security Hub, Inspector, Macie, and WAFDevelop and maintain infrastructure security controls using Infrastructure as Code (Terraform, AWS CDK Python)
- Perform threat modeling, risk assessments, and vulnerability remediation
- Implement logging, monitoring, and alerting strategies using CloudTrail, CloudWatch, and centralized SIEM solutions
- Participate in incident response efforts for cloud-related security events
- Automate security checks and compliance validation across AWS environments
- Collaborate with DevOps and engineering teams to embed security into CI/CD pipelines (DevSecOps)
- Responding to RFIsRequirementsMust possess an active Security Clearance
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field (or equivalent experience)3+ years of experience in cloud security or infrastructure security
- Strong understanding of STIG hardening, vulnerability scanning, and remediation processes
- Strong hands-on experience with AWS security services and architecture
- Understanding of IAM, encryption (KMS), and key management best practices
- Experience with network security in AWS (VPCs, routing, firewalls)
- Proficiency in scripting languages (Python, Bash)
- Experience with Infrastructure as Code (Terraform or AWS CDK Python)
- Understanding of compliance frameworks such as NIST 800-53, RMF, CIS Benchmarks, and FedRAMP
Desired Qualifications:
- Experience with STIG hardening
- Experience with container security (EKS, ECS, image scanning)
- Knowledge of identity federation (SSO, SAML, OIDC)
- Experience integrating AWS logs with SIEM platforms
Familiarity with Zero Trust architecture principlesAWS certifications (AWS Certified Security – Specialty, Solutions Architect, etc.)Security certifications (CISSP, CISM, CEH, or Security+)Equal Employment Opportunity
Statera Systems Solutions LLC is an Equal Employment Opportunity/Affirmative Action employer. We are committed to fostering an inclusive workplace and providing equal employment opportunities to all qualified applicants, without regard to race, color, religion, sex, pregnancy, sexual orientation, or any other status protected by applicable law.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.