Sr. Cloud Security Engineer II (6306)

As a Sr. Cloud Security Engineer II, you’ll serve as a technical leader for securing and scaling cloud platforms supporting a mission-critical federal program. This role focuses on cloud security architecture, DevSecOps automation, and secure platform enablement across commercial and government cloud environments. You will define secure patterns, embed security into CI/CD pipelines, and partner closely with platform, application, and compliance teams to ensure security is built in — not bolted on. This is a hands-on technical leadership role for an experienced cloud security engineer who enjoys designing scalable solutions and influencing security outcomes across teams with the goal to make an impact across the federal government. 

We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers.

If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below!

What you’ll do:

Cloud Security Architecture

• Design and guide secure cloud architectures across AWS, Azure, and/or GCP, including GovCloud and restricted environments.
• Define and maintain cloud security standards aligned with NIST 800-53, FedRAMP, and CIS Benchmarks.
• Lead architecture reviews, threat modeling, and secure design guidance for cloud services and workloads.

DevSecOps & Automation

• Build and maintain Infrastructure as Code (Terraform preferred) to enforce security controls at scale.
• Integrate automated security testing into CI/CD pipelines (SAST, DAST, IaC, container scanning).
• Develop automated guardrails, policies, and remediation workflows to reduce manual effort and risk.

Governance, Compliance & Visibility

• Support ATO and compliance efforts by embedding controls directly into cloud and pipeline designs.
• Partner with compliance teams and auditors to support evidence collection and continuous monitoring.
• Implement centralized logging, monitoring, and incident response across cloud environments.

Technical Leadership & Collaboration

• Serve as a cloud security subject matter expert for engineers, architects, and stakeholders.
• Guide and mentor engineers on secure cloud development and automation practices.
• Collaborate across platform, application, and security teams to align security objectives.

What you’ll need to succeed:

• Active Secret security clearance
• 8+ years of experience in cybersecurity or cloud engineering, with 5+ years focused on cloud security
• Deep hands-on advanced experience securing and automating one or more cloud environments (AWS, Azure, GCP)
• Strong experience with native cloud security tools (AWS Security Hub, GuardDuty, Defender for Cloud, Azure Policy, etc.)
• Strong experience with infrastructure as code (Terraform, CloudFormation, ARM/Bicep) and integrating security into CI/CD pipelines (GitLab, GitHub Actions, etc.)
• Technical experience with IAM/RBAC, key management (KMS/Key Vault/Cloud KMS), networking (VPC/VNET), and encryption
• Familiarity aligning security controls with NIST 800-53, FedRAMP, CIS Benchmarks, or equivalent frameworks
• Strong communication and leadership skills and ability to influence technical and non-technical stakeholders

SALARY RANGE: $156,000 - $178,000

The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including: 

• The candidate's professional background and relevant work experience
• The specific responsibilities of the role and organizational needs
• Internal equity and alignment with current team compensation
• This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include:
• Performance-based bonuses
• Company-paid training and/or certifications
• Referral bonuses