Cloud Security Engineer

Ready to Ignite your career and work alongside some of the most innovative and brightest professionals in federal services today? Join us and unleash your potential working in an agile environment alongside the men and women charged with ensuring the success of one of the most important missions in American Government.  We’re seeking a Cloud Security Engineer to help design and implement robust security practices across our AWS environments. This role is ideal for someone with deep expertise in IAM, encryption, threat detection, and compliance frameworks like FedRAMP and NIST. You'll be responsible for securing infrastructure using tools like GuardDuty, Security Hub, and KMS, while partnering with compliance and ATO teams to meet regulatory requirements. From access control and encryption to incident response planning and vulnerability detection, you’ll play a key role in safeguarding mission-critical systems in the cloud.

As a Cloud Security Engineer you will:

Implement IAM roles/policies, RBAC, and MFA enforcement.

Configure KMS encryption for S3, EBS, RDS, and logs.

Deploy GuardDuty, WAF, Inspector, and Security Hub integrations.

Collaborate with ATO team on POA&M closure and security documentation.

Conduct security assessments and implement detective controls.

Respond to security findings and coordinate remediation.

Requirements

• Strong expertise in identity and access management, including IAM roles, least privilege principles, federated access (SSO, Active Directory), and session policy configuration.
• Proven experience implementing encryption solutions for data in transit and at rest using AWS KMS, CloudHSM, and TLS protocols.
• Hands-on experience configuring and managing AWS security services such as GuardDuty, CloudTrail, Inspector, Security Hub, and AWS WAF/Shield for logging and threat detection.
• In-depth understanding of federal compliance frameworks, with the ability to interpret and enforce FedRAMP and NIST 800-53 controls in coordination with ISSOs and compliance teams.
• Demonstrated ability to define and lead incident response strategies, including the use of AWS-native tools to simulate, detect, and remediate security threats.
• Bachelor's degree in related technical field.
• US Citizenship Required.
• AWS certifications highly preferred.

Benefits

• 401(k) with matching and 100% Vested
• Health Insurance - 3 plans to select from
• Dental insurance
• Vision Insurance
• Health savings account
• Life insurance
• Short Term Disability
• Long Term Disability
• AD&D
• Paid time off
• Professional development assistance
• Training
• Tuition reimbursement
• Flexible schedule
• Flexible spending account
• Referral program
• Paid Legal Plan
• and more....

Ignite IT is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, Veteran status, sexual orientation, or other protected characteristic. In accordance with EO 13665 Final Rule, Ignite IT will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.

Applicants selected must be able to possess and maintain a government clearance

US CITIZENSHIP REQUIRED