AWS Cloud Security Engineer (AWS)

Location: San Diego, California, USA, with an additional location in McLean, Virginia, USA. Remote work is available, though occasional work at a Booz Allen or customer facility may be required.

Salary: $69,300–$158,000 annualized USD.

Company

hirify.global delivers cloud engineering, cybersecurity, architecture, and technology consulting services for enterprise and government clients.

What you will do

• Perform AWS cloud security assessments covering Organizations, accounts, landing zones, identity, networking, workloads, policies, Infrastructure as Code, and security tooling.
• Develop secure configuration baselines, preventive guardrails, security policies, and reusable security patterns for AWS services.
• Create and review Terraform and other Infrastructure as Code for deploying and managing AWS resources.
• Automate security controls using Python, Bash, PowerShell, AWS CLI, SDKs, APIs, and engineering tools.
• Evaluate cloud security tooling, review application architectures, and identify security and architecture gaps.
• Translate technical findings into practical recommendations, implementation steps, and technical documentation while collaborating with cloud, security, application, governance, and client leadership teams.

Requirements

• 3+ years of experience in AWS cloud engineering, cloud security, infrastructure engineering, DevSecOps, site reliability engineering, or enterprise cloud delivery.
• Experience with AWS Organizations, multi-account environments, IAM, roles, policies, Service Control Policies, or cross-account access.
• Experience with AWS networking, including VPCs, subnets, security groups, routing, Transit Gateway, private connectivity, DNS, load balancing, and ingress or egress controls.
• Experience with AWS security and monitoring services such as CloudTrail, AWS Config, GuardDuty, Security Hub, KMS, IAM Access Analyzer, CloudWatch, Systems Manager, or AWS Inspector.
• Experience with Terraform, AWS CloudFormation, or Infrastructure as Code, plus scripting or automation.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or Information Systems.

Nice to have

• Experience with IAM Identity Center, SAML, OIDC, permission sets, privileged access, enterprise federation, or identity governance.
• Experience with AWS landing zones, Control Tower, account vending, centralized logging, shared services, or enterprise AWS platform architectures.
• Experience with CSPM or CNAPP platforms such as Wiz, Prisma Cloud, Orca Security, or Lacework.
• Experience integrating security requirements into CI/CD, Git workflows, DevSecOps, automated testing, or policy-as-code.
• Knowledge of NIST, CIS Benchmarks, ISO 27001, FedRAMP, Azure security, or Google Cloud security.

Culture & Benefits

• Full-time employment with health, life, disability, financial, and retirement benefits.
• Paid leave, professional development, tuition assistance, work-life programs, and dependent care support.
• Recognition awards for exceptional performance and demonstration of company values.
• Virtual employees are generally expected to keep cameras on during meetings.
• Remote employees may occasionally need to work at a Booz Allen or customer facility.