below marketmost similar roles pay hereabove market
This role pays less than
96%
of similar roles. Most pay
$142,400–$203,500
— the blue band above.
At the midpoint, this role pays about
$102k
versus about
$173k
for comparable roles.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
1781 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 898 roles with salary data.
JOB TITLE: Cloud Security Engineer
The Cloud Security Engineer joins the team to design and implement secure, mission-critical cloud-based systems for Air Force warfighter systems. You will research current environments to recommend tools and capabilities that address Risk Management Framework requirements while ensuring information assurance standards are met. Daily responsibilities include managing DevSecOps pipelines within GitLab, performing automated security scanning using SonarQube, OWASP ZAP, Trivy, KICS, or Checkmarx for SAST/DAST, and managing system hardening and secrets management. You will architect network and data flow diagrams, document Ports, Protocols, and Services, and write Infrastructure as Code using AWS CloudFormation or Terraform. Required skills include RMF or NIST compliance experience, Secret clearance, and a Bachelor's degree in Computer Science or Cybersecurity.
Design and implement secure cloud-based architectures for mission-critical Air Force systems.
Recommend security tools and capabilities based on research of on-premises, cloud, and hybrid resources.
Evaluate system compliance using RMF, NIST, and DevSecOps methodologies.
Manage DevSecOps pipelines and automated security scanning tools for SAST, DAST, and infrastructure compliance.
Perform system hardening and secrets management to secure cloud-deployable systems and container images.
Architect network and data flow diagrams and document Ports, Protocols, and Services (PPSM).
Write Infrastructure as Code (IaC) using tools like AWS CloudFormation or Terraform for automated provisioning.
Mentor junior cloud security experts on best practices and technologies.
What we're looking for
3+ years of experience evaluating system compliance using RMF or NIST and DevSecOps tools and methodologies.
Experience deploying, configuring, or maintaining a government-approved security suite of cybersecurity tools and methods.
Experience with Automated Security Scanning and Compliance, including managing GitLab pipelines and tools like SonarQube, OWASP ZAP, Trivy, KICS, or Checkmarx.
Experience with System Hardening and Secrets Management, including securing cloud-deployable systems and container images.
Experience architecting network and data flow diagrams, compiling evidence, and documenting Ports, Protocols, and Services (PPSM).
Experience evaluating and recommending cloud services, tools, and technologies to improve government system capabilities.
Experience writing in IaC tools such as AWS CloudFormation or Terraform.
Microsoft Azure
Terraform
Infrastructure as Code
CI/CD
DevSecOps
Microsoft Defender for Cloud
Sentinel
Wiz
InsightCloudSec
Azure IAM
RBAC
Vulnerability Management
Monitoring
Logging
OCI