Cloud Security Compliance Engineer

Hoplite Solution is seeking a highly skilled Cloud Security Compliance Engineer with hands-on experience obtaining Authority to Operate (ATO) for AWS cloud-based workloads. The ideal candidate will be well-versed in federal compliance frameworks such as NIST RMF and NIST SP 800-53 and capable of automating compliance processes within AWS environments. You will play a key role in authoring security documentation, integrating security tools, and supporting the automation of governance activities across complex cloud architectures.

Key Responsibilities:

• Lead or support efforts to obtain and maintain ATOs for AWS-based systems.

• Implement and manage compliance automation tools and AWS governance services such as AWS Config.

• Develop and maintain Body of Evidence (BoE) documentation including:

  • Security control implementation statements

  • System Security Plans (SSPs)

  • Test plans and procedures

  • Architecture diagrams

• Integrate AWS monitoring and auditing services (e.g., CloudWatch, CloudTrail) into GRC platforms.

• Build and configure STIG-compliant AWS resources, including hardened Amazon Machine Images (AMIs).

• Automate security-related processes using scripting languages (e.g., Python).

• Collaborate with engineering, DevOps, and security teams to ensure systems meet federal and organizational compliance requirements.

Required Qualifications:

• Proven experience obtaining ATO for AWS cloud-based systems.
  
  Active Poly

• Strong knowledge of federal security frameworks such as:

  • NIST Risk Management Framework (RMF)

  • NIST SP 800-53

• Experience with AWS-native compliance/governance services (e.g., AWS Config, AWS Organizations).

• Demonstrated experience authoring ATO-related documentation.

• Proficiency in integrating AWS log data (CloudTrail, CloudWatch) into GRC tools.

• Experience automating security tasks using Python.

Desired Qualifications:

• Familiarity with customer-specific security practices (e.g., STE, STN).

• Experience with STIG implementation and building hardened cloud images.

• Relevant certifications such as:

  • AWS Certified Security – Specialty

  • CISSP, CAP, or similar

• Experience working in federal or highly regulated environments.

Powered by JazzHR