Cloud Security Engineer

Booz Allen Hamilton

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Washington, DC
Salary
$86,800–$198,000 / yr
Employment
Full-time
Posted
1 day ago
Freshness
Confirmed live today

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $173k
This role $142k
$71k most similar roles pay here $234k

This role pays less than 78% of similar roles. Most pay $143,278–$203,125 — the shaded band above. At the midpoint, this role pays about $142k versus about $173k for comparable roles.

Based on 240 similar postings.

Employer

About Booz Allen Hamilton

Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting

Booz Allen Hamilton currently has 1385 open roles on FindRole.

Listed pay typically runs $86,800–$198,000 across 911 roles with salary data.

Most-posted roles

View all roles at Booz Allen Hamilton

At a glance

TL;DR · Cloud Security Engineer

As a Cloud Security Engineer on the Microsoft Purview Data Protection team, you will design, implement, and optimize enterprise information protection, data loss prevention, insider risk, and lifecycle governance controls across Microsoft 365 environments. You will collaborate with Navy mission stakeholders and cybersecurity teams to translate policy into technical enforcement mechanisms while building custom Sensitive Information Types, engineering retention policies, and designing label-driven encryption. The role requires expertise in Microsoft Purview, Entra ID, and IL5 or IL6 GovCloud requirements. You will utilize tools such as PowerShell for automation and manage capabilities like Conditional Access, eDiscovery, and audit log investigations. This position focuses on securing sensitive information within high-security environments by implementing Zero Trust capabilities and managing data protection across endpoints and collaboration platforms to ensure secure data handling in regulated government contexts.

What you'll do

  • Design and implement enterprise information protection, DLP, and insider risk controls across Microsoft 365.
  • Build custom Sensitive Information Types (SITs) and engineer retention and records management policies.
  • Create label-driven encryption and deploy DLP safeguards across endpoints and collaboration platforms.
  • Manage identity governance using Microsoft Entra ID, RBAC, and Conditional Access.
  • Translate policy requirements into technical enforcement mechanisms for Navy mission stakeholders.
  • Perform advanced audit log investigations, eDiscovery, and legal holds.
  • Automate configuration, reporting, and security tasks using PowerShell.
  • Mentor junior team members on cloud security and Purview compliance engineering.

What we're looking for

  • 7+ years of experience within the DoD.
  • 7+ years of experience in enterprise information protection, data governance, or cloud security with tools such as Microsoft 365 or Purview.
  • Experience designing and deploying sensitivity labels, SITs or EDM, and DLP across M365 workloads and endpoints.
  • Experience with Microsoft Entra ID, RBAC, and Conditional Access.
  • Knowledge of eDiscovery, legal holds, advanced search, and audit log investigations.
  • Top Secret clearance.
  • Security+ DoD 8570-compliant Certification.
  • Bachelor's degree.

More like this

Similar roles

Cloud Security Engineer

Booz Allen Hamilton

Reston, VA +1 10 days ago $86,800–$198,000
OCI SIEM Terraform Cribl Elastic Cloud Security Network Security Syslog Event Streaming Object Storage Message Queues Security Architecture Cybersecurity
8+ yrs exp

Senior Cloud Security Engineer

Booz Allen Hamilton

Charlottesville, VA +1 48 days ago $99,000–$225,000
AWS Microsoft Azure Python Bash PowerShell Infrastructure-as-Code Git CI/CD DevSecOps Agile Jira Confluence Linux Windows RMF
8+ yrs exp

Cloud Security Engineer

Booz Allen Hamilton

Lexington, MA 18 days ago $112,900–$257,000
Elasticsearch Kibana Logstash Beats Fleet Elastic Common Schema (ECS) AWS Python scikit-learn PyTorch Kubernetes ES QL EQL SIEM Agile

Principal Cyber Sec Engineer, DLP / Data Protection

Northern Trust

Chicago, IL 5 days ago $137,400–$233,600
Data Loss Prevention Microsoft Purview Zscaler Active Directory Microsoft Entra ID Azure Information Protection Microsoft Information Protection Microsoft Defender for Cloud Apps Database Activity Monitoring Encryption DSPM Insider Risk Management Communication Compliance PCI-DSS SOX FFIEC Network Security Information Protection

Cloud Security Engineer

Leidos

Seaside, CA 152 days ago $107,900–$195,050
Cloud Security RMF DevSecOps Zero Trust FedRAMP DISA SRG STIGs eMASS AWS Azure Kubernetes Docker IAM Fortify Sonatype Encryption
10+ yrs exp

Senior Cloud Security Engineer

Booz Allen Hamilton

McLean, VA +4 76 days ago $99,000–$225,000
Cloud Security Risk Management Framework (RMF Terraform CloudFormation Bicep Agile SDLC Security Architecture Information Assurance COTS GOTS open-source SecurityX CASP+ CCNP Security CISA CISSP GCED GCIH CCSP CEH CySA+ GICSP SSCP CHFI CFR Cloud+ CND
3+ yrs exp