AWS Cloud Security Engineer

Quevera LLC is hiring an AWS Cloud Security Engineer (active TS/SCI) to help secure and manage security posture across a complex, multi-vendor AWS environment.

Responsibilities

• Design and implement intelligent model-routing logic using ML-based classification to route requests to appropriate LLMs based on conversational context, task complexity, and performance needs.
• Build and maintain orchestration layers using AWS Bedrock, LangChain, or custom frameworks to support multi-model workflows.
• Train, evaluate, and iteratively improve classification models using evaluation frameworks and feedback loops.
• Architect conversation-context analysis, retrieval, and embedding strategies for interpreting user intent across multi-turn interactions.
• Develop prompt-engineering standards and context-window management techniques to support intent classification and routing.
• Architect enterprise-scale GenAI solutions with high availability, performance optimization, and cost management.
• Apply GenAI platform practices including observability, model evaluation, guardrails, responsible AI controls, and versioning.
• Design and maintain data extraction and transformation pipelines to support model training, evaluation, and enterprise application integration.
• Coordinate with customer stakeholders and technical counterparts to gather requirements, validate solutions, and participate in Agile/Scrum ceremonies.
• Collaborate with the Engagement Manager to track progress and risks, and produce technical documentation, architecture diagrams, and handoff artifacts.

Requirements

• Develop reusable Infrastructure as Code (IaC) and cross-account integrations to standardize and centralize security services across a complex, multi-vendor environment with distributed AWS accounts under an externally managed organization.
• Assess current security posture and drive vendor alignment with organizational standards.
• Support government security processes and production of compliance artifacts, including IATTs and ATOs.
• Integrate distributed logging to a centralized reviewer (C5ISR).

Desired Skills

• Active TS/SCI clearance required.
• Ability and willingness to work from AWS SCIFs as required.
• Local candidates required for Herndon, VA, Denver, CO, or Seattle, WA.

Technologies

• AWS
• AWS Bedrock
• LangChain
• ML-based classification
• LLMs
• Infrastructure as Code (IaC)
• IATTs
• ATOs
• C5ISR

Work Location

• AWS IAD21 – Herndon, Virginia
• Customer Site – Springfield, Virginia
• Denver, Colorado
• Seattle, Washington
• Work split: approximately 80% low-side / 20% high-side.
• Remote work acceptable with attendance at AWS SCIFs as required.
• Role supports work across Herndon, VA; Springfield, VA; Denver, CO; and Seattle, WA.

Benefits

• 100% employer-paid medical coverage (optional plan)
• Competitive options for Medical, Dental and Vision insurance
• Employer-paid short-term and long-term disability coverage
• Employer-paid life insurance
• $5,000 annually for education, training, certifications, and professional development
• Career advancement through the structured iQTouch Program
• Up to 6% 401(k) match
• Additional 4% profit-sharing contribution, at company discretion

Additional Information

• Quevera recognized as a Top Workplace in the Washington, DC/Baltimore region for 2025, fifth consecutive year.
• Equal opportunity/affirmative action employer; all qualified applicants receive consideration without regard to protected characteristics.