Cloud Security Consultant

Job Summary

The ideal candidate will have strong hands-on AWS security experience and expertise in cloud security architecture, federal cybersecurity frameworks, DevSecOps, IAM, security engineering, and Infrastructure-as-Code. This role will provide security guidance, conduct cloud infrastructure assessments, and help engineering teams implement secure and compliant AWS solutions.

Key Responsibilities

• Conduct security reviews of AWS cloud infrastructure and Infrastructure-as-Code (IaC).

• Evaluate cloud environments against security standards, policies, and best practices.

• Assess compliance with the AWS Well-Architected Framework Security Pillar.

• Identify, document, and remediate security misconfigurations and compliance gaps.

• Implement AWS security controls and security hardening measures.

• Develop and maintain AWS security configuration standards, guides, and playbooks.

• Create and maintain security posture dashboards and reporting.

• Provide technical security consultation to engineering and development teams.

• Support DevSecOps, vulnerability management, IAM, network security, data protection, and Zero Trust initiatives.

• Identify opportunities to automate security assessments and improve security tooling.

• Conduct security awareness and training sessions for engineering teams.

• Present security findings, risks, and recommendations to technical stakeholders.

Required Qualifications

• 5+ years of hands-on AWS security experience.

• Experience designing and implementing secure, scalable AWS cloud architectures.

• Strong knowledge of federal cybersecurity requirements and frameworks, including NIST Cybersecurity Framework, NIST SP 800-53, and applicable OMB guidance.

• Strong understanding of IAM, cloud security, security architecture, network security, security operations, DevSecOps, vulnerability management, Zero Trust, and data protection.

• Hands-on experience with AWS security services, security engineering, scripting, and Infrastructure-as-Code.

• Strong analytical, troubleshooting, and problem-solving skills.

• Ability to independently address complex security challenges.

• Excellent communication and technical consulting skills.

• Strong attention to detail and ability to work independently.

Preferred Qualifications

• AWS Certified Security – Specialty certification strongly preferred.

• AWS Certified Solutions Architect – Associate or Professional certification.

• Experience supporting federal or government cloud security environments.

• Experience developing security automation and assessment tooling.

• Experience providing security advisory services to engineering and technical teams.