Cloud Security Engineer (AWS)

Location: Hybrid in Burlington, Massachusetts; onsite multiple days per week. Candidates must be legally authorized to work in the United States without employer sponsorship.

Compensation range: $125,000–$150,000 per year.

Company

hirify.global develops AI-enabled radar and sensing systems combining advanced radar, edge computing, and AI for situational awareness, including solutions for U.S. government customers.

What you will do

• Build, operate, assess, and secure AWS environments against security baselines, FedRAMP requirements, and other applicable standards.
• Partner with Software Engineering and AI teams to integrate security and compliance into system architecture, CI/CD, deployment, and operational workflows.
• Support FedRAMP authorization and continuous monitoring through evidence collection, control maintenance, audit preparation, POA&Ms, and remediation tracking.
• Perform security architecture reviews, risk and gap assessments, vulnerability management, system hardening, and security control implementation across networking, Linux, IAM, encryption, logging, and monitoring.
• Build and maintain Infrastructure as Code, CI/CD, deployment, and release automation using tools such as Terraform, Pulumi, and Python.
• Maintain security documentation, system diagrams, asset inventories, and control implementation details while supporting assessors, compliance partners, audits, and broader release engineering initiatives.

Requirements

• 3–6 years of experience in security engineering, cloud security, DevSecOps, infrastructure security, or a related technical field.
• Hands-on AWS experience with networking, Linux, IAM, encryption, logging, vulnerability management, and security monitoring.
• Experience with security frameworks such as FedRAMP, NIST 800-53, NIST 800-171, CMMC, RMF, or similar standards.
• Experience translating security and compliance requirements into practical technical controls with engineering teams.
• Hands-on experience with DevOps practices, Infrastructure as Code, source control, CI/CD pipelines, and automated deployment workflows.
• Knowledge of system hardening, vulnerability remediation, secure configurations, and security control lifecycle management.
• Strong problem-solving, communication, and cross-functional collaboration skills.
• Must be legally authorized to work in the United States without employer sponsorship. The role involves direct or indirect work with the U.S. Government in restricted environments and may require obtaining and maintaining a U.S. government security clearance.

Nice to have

• Direct experience supporting FedRAMP authorization, especially in a FedRAMP High environment.
• Familiarity with AWS GovCloud and NIST 800-53, plus experience working with external assessors, compliance partners, or a 3PAO.
• Understanding of FIPS 140, encryption and key management, secure system boundaries, and Controlled Unclassified Information requirements.
• Experience hardening Linux operating systems using DISA STIGs or similar standards.
• Experience with Terraform, Pulumi, and/or Python automation.

Culture & Benefits

• Hands-on work across cloud engineering, automation, security, compliance, and release engineering.
• Security and compliance are integrated into engineering workflows rather than handled only as a separate audit function.
• Focus on making security and compliance more automated, repeatable, and scalable.
• Hybrid work with onsite presence required multiple days per week.