AWS Cloud Security Engineer

Booz Allen Hamilton

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
San Diego, CAMcLean, VA
Employment
Full-time
Posted
60 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $173k
$118k $213k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $142,450–$203,031.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1662 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 904 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · AWS Cloud Security Engineer

As an AWS Cloud Security Engineer, you will join a team supporting a hands-on cloud security assessment and engineering program for a large enterprise environment. You will identify security gaps by reviewing AWS Organizations, accounts, landing zones, identity, networking, and Infrastructure as Code. Your daily responsibilities include establishing secure configuration baselines, developing reusable Terraform and Infrastructure as Code, creating security policies, and producing technical documentation. You will utilize AWS-native services including IAM, VPC, CloudTrail, Config, GuardDuty, KMS, and Systems Manager. Required skills include experience with Python, Bash, or PowerShell for automation, along with expertise in multi-account environments and security monitoring. You will solve complex cloud security posture problems by translating technical requirements into scalable, repeatable engineering solutions for diverse stakeholders.

What you'll do

  • Perform hands-on AWS cloud security assessments to identify gaps in enterprise environments.
  • Establish minimum secure configuration baselines for various AWS services.
  • Develop reusable Terraform and Infrastructure as Code (IaC) for secure deployments.
  • Create security policies, preventive guardrails, and Service Control Policies (SCPs).
  • Manage identity and access management (IAM) across multi-account AWS Organizations.
  • Configure and optimize AWS security services including GuardDuty, Security Hub, and KMS.
  • Translate technical security requirements into scalable, repeatable engineering solutions.
  • Produce implementation-ready technical documentation for cloud security standards.

What we're looking for

  • 3+ years of experience with AWS cloud engineering, cloud security, infrastructure engineering, DevSecOps, site reliability engineering, or enterprise cloud delivery.
  • Experience with AWS Organizations, multi-account environments, IAM, roles, policies, Service Control Policies, or cross-account access.
  • Experience with AWS networking, including VPCs, subnets, security groups, routing, Transit Gateway, private connectivity, DNS, and load balancing.
  • Experience with AWS security and monitoring services including CloudTrail, AWS Config, GuardDuty, Security Hub, KMS, and Systems Manager.
  • Experience developing or reviewing Terraform, AWS CloudFormation, or Infrastructure as Code to manage AWS resources.
  • Experience with scripting or automation using Python, Bash, PowerShell, AWS CLI, SDKs, APIs, or engineering tools.
  • Experience assessing technical environments to identify security gaps and translating findings into practical recommendations or technical documentation.
  • Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or Information Systems.

More like this

Similar roles

Cloud Security Engineer

Booz Allen Hamilton

Beavercreek, OH +1 5 days ago $86,800–$198,000
AWS Risk Management Framework (RMF) IAM VPC Splunk OpenSearch Security Hub GuardDuty CloudTrail STIG Linux SDLC Microsoft Azure Oracle Cloud Vulnerability Management Continuous Monitoring
5+ yrs exp

Cloud Engineer

Booz Allen Hamilton

Annapolis Junction, MD +1 12 days ago $86,900–$198,000
AWS Azure Kubernetes Terraform Python TypeScript Bash PowerShell CI/CD AWS CDK CloudFormation F5 BIG-IP Splunk Helm Argo CD GitOps IAM Identity Center Keycloak Security Hub GuardDuty Inspector AWS Network Firewall Tenable ACAS Trellix Cosign Kyverno JFrog Artifactory Transit Gateway

Cloud Security Engineer

Leidos

Seaside, CA 175 days ago $107,900–$195,050
Cloud Security RMF NIST SP 800-53 DevSecOps Zero Trust AWS Azure FedRAMP DISA SRG STIGs IAM eMASS Kubernetes Docker Fortify Sonatype Continuous Monitoring Vulnerability Management Encryption Code Scanning
10+ yrs exp

Cloud Security Engineer

Stripe

Remote 175 days ago $179,000–$268,400
AWS Azure GCP Kubernetes Linux IAM CSPM CNAAP Cloud Security Threat Modeling Security Monitoring Automation Tooling
Remote

Cloud Security Engineer

Stripe

Remote 175 days ago $179,000–$268,400
AWS Azure GCP Kubernetes Linux IAM CSPM CNAAP Cloud Security Threat Modeling Security Monitoring
Remote

Cloud Security Engineer

Booz Allen Hamilton

Chantilly, VA 58 days ago $86,800–$198,000
Cloud Security Risk Management Framework (RMF) Security Architecture Agile JIRA SDLC Information Assurance Security+ SSCP CCNA-Security GSEC