Cloud Security Specialist (Aws) - DC Area

Our client is a financial institution providing the United States with a safe, flexible, and stable monetary system. They are seeking an AWS Cloud Security Specialist. In this role you will be responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments.

This role is onsite inWashington, DC. Per our client contract, candidates must be US Citizens.

Responsibilities

• Perform routine security assessments of cloud infrastructure deployed by engineering teams
• Analyze infrastructure-as-code to ensure alignment with established security standards
• Validate compliance with organizational security policies and industry best practices
• Evaluate adherence to the AWS Well-Architected Framework security pillar
• Detect and document security misconfigurations and gaps in control compliance
• Build and maintain dashboards to monitor and report on security posture
• Develop and update security configuration guides and operational playbooks
• Provide technical guidance to engineering teams on secure design and implementation
• Implement AWS security services and controls to support system hardening and broader security engineering efforts
• Establish and refine AWS security configuration standards
• Deliver security training and awareness sessions for engineering teams
• Present assessment results and recommendations to stakeholders in team forums
• Identify and drive opportunities to automate security assessments and processes
• Recommend enhancements to security tools and technologies

Qualifications

• Required Experience:
  • At least 5 years of hands-on experience in AWS security
• Personnel Qualifications:
  • AWS Certified Security – Specialty (strongly preferred)
  • AWS Certified Solutions Architect – Associate or Professional
• Proven experience designing and implementing secure, scalable AWS cloud architectures aligned with industry security best practices and frameworks
• Demonstrated federal experience with in-depth knowledge of implementing cybersecurity requirements, including frameworks such as the NIST Cybersecurity Framework, OMB Memorandum M-22-09, and NIST SP 800-53
• Strong analytical, problem-solving, and troubleshooting capabilities, with the ability to independently resolve complex security issues
• Track record of providing proactive technical security advisory services, including identifying risks, raising key questions, and collaborating with stakeholders to meet security objectives
• Comprehensive understanding of security principles and technologies across IAM, security engineering, network security, security operations, architecture, cloud security, data loss prevention, zero trust, DevSecOps, and vulnerability management
• Hands-on technical expertise in AWS cloud security, security engineering practices, DevSecOps, scripting, and Infrastructure-as-Code (IaC)
• Self-starter with the ability to work independently and take initiative
• High level of attention to detail