AWS Cloud Security Engineer

Peraton is seeking an experienced AWS Cloud Security Engineer to design, build, and operate security controls for a FedRAMP Moderate-authorized AWS cloud infrastructure supporting the Risk Decision Group (RDG) program. This hands-on role involves embedding secure-by-design principles into cloud architecture and maintaining continuous FedRAMP compliance. The engineer will implement security architecture, harden AWS environments, maintain continuous compliance monitoring, and support Authorization to Operate (ATO) activities. Key responsibilities include implementing security controls using AWS-native services, managing infrastructure as code with policy-as-code, handling System Security Plans (SSPs), and participating in ATO validation. The candidate will configure centralized logging, integrate SIEM solutions, enforce least-privilege IAM policies, and ensure encryption standards are met per FIPS requirements. Additional duties include responding to security incidents, conducting root cause analysis, and developing cloud-specific incident response playbooks. Collaboration with DevOps and platform teams to embed security into CI/CD pipelines (DevSecOps) is a core expectation. Documentation development for control implementations, architecture diagrams, and audit evidence is essential. Required qualifications include U.S. citizenship and Top-Secret clearance eligibility, a BS/BA in computer science or related field, and 5+ years of AWS engineering experience with at least 3 years in cloud security roles, plus extensive federal compliance experience across frameworks like FedRAMP, NIST, and RMF. This remote position offers 100% work-from-home flexibility for qualified candidates.

Source: Himalayas