AWS Cloud Security Engineer (AWS)

Location: Remote, United States; listed locations are San Diego, California, and McLean, Virginia. Occasional in-person work at a Booz Allen or customer facility may be required.

Salary: $69,300–$158,000 annualized USD.

Company

hirify.global provides technology, consulting, and engineering services for large enterprise and government-related environments.

What you will do

• Conduct AWS cloud security assessments covering Organizations, accounts, landing zones, identity, networking, workloads, policies, and security tooling.
• Establish secure configuration baselines, security policies, preventive guardrails, and reusable security patterns.
• Develop Terraform and other Infrastructure as Code for AWS resources and security controls.
• Support IAM, network security, CloudTrail, Config, GuardDuty, Security Hub, KMS, Systems Manager, and related AWS-native services.
• Review application and cloud architectures, identify security gaps, and recommend practical implementation steps.
• Collaborate with cloud platform teams, security stakeholders, application owners, governance teams, architects, and client leadership.

Requirements

• 3+ years of experience in AWS cloud engineering, cloud security, infrastructure engineering, DevSecOps, SRE, or enterprise cloud delivery.
• Experience with AWS Organizations, multi-account environments, IAM, roles, policies, Service Control Policies, or cross-account access.
• Experience with AWS networking, including VPCs, subnets, security groups, routing, Transit Gateway, DNS, load balancing, and ingress or egress controls.
• Experience with AWS security and monitoring services, Terraform, CloudFormation, or Infrastructure as Code.
• Experience with scripting or automation using Python, Bash, PowerShell, AWS CLI, SDKs, APIs, or engineering tools.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or Information Systems.

Nice to have

• Experience with IAM Identity Center, SAML, OIDC, permission sets, enterprise federation, identity governance, or privileged access.
• Experience with AWS Control Tower, landing zones, account vending, centralized logging, shared services, or enterprise AWS platform architectures.
• Experience with CSPM or CNAPP platforms such as Wiz, Prisma Cloud, Orca Security, or Lacework.
• Experience integrating security requirements into CI/CD, Git workflows, DevSecOps, automated testing, or policy-as-code.
• Knowledge of NIST, CIS Benchmarks, ISO 27001, FedRAMP, Microsoft Azure, or Google Cloud security.

Culture & Benefits

• Health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care.
• Recognition awards for exceptional performance and demonstration of company values.
• Virtual employees are generally expected to keep cameras on during meetings.
• Remote work may include occasional work at a Booz Allen or customer facility.

Hiring process

• Identity verification using biometrics and artificial intelligence is required during the hiring process.
• Candidates are expected to be on camera during interviews and assessments.
• Use of AI tools during interviews is prohibited unless explicitly permitted.