Cloud Security Engineer (local to MD)

Job Title: Cloud Security Engineer / IAM Engineer
Location: Baltimore, MD

Job Description:
We are seeking an experienced Cloud Security Engineer with strong IAM expertise to support and secure large, mission-critical cloud environments. The role focuses on AWS cloud security, IAM solutions, incident response, and compliance.

Key Responsibilities:

• Design, implement, and maintain cloud security controls in AWS

• Perform cloud security assessments, penetration testing, and risk analysis

• Support security incident response and forensics using SIEM tools

• Administer and enhance IAM solutions (ForgeRock, SailPoint)

• Manage access provisioning, de-provisioning, and identity lifecycle

• Maintain security documentation (SSP, PIA, POA&M, CAP)

• Administer cloud and physical firewalls

• Ensure compliance with NIST and other security standards

Required Skills & Experience:

• 8+ years in IT security operations

• 4+ years of hands-on AWS cloud security experience

• Strong experience with AWS security services (GuardDuty, WAF, CloudTrail, etc.)

• IAM experience with ForgeRock and/or SailPoint

• Security operations experience on Windows and Linux

• Incident response, vulnerability management, and SIEM experience

Preferred:

• Experience with compliance frameworks (NIST 800-37/53, IRS 1075, MARS-E)

• Firewall experience (ASA/Fortinet)

• SSO, AD/LDAP integration

• Security certifications (CISSP, CCSE, CSA, etc.)

Work Requirements:

• Flexibility to work weekends, holidays, or off-hours as needed