Cloud Security Engineer

Guidehouse Digital, LLC is hiring a Cloud Security Engineer to design, implement, and maintain security controls across AWS environments while embedding security into CI/CD and day-to-day operations. This onsite role in San Antonio, TX supports secure cloud architecture, compliance alignment, and incident readiness across cloud accounts and services.

What you’ll do

• Design, implement, and maintain security controls across AWS cloud environments.
• Protect cloud workloads using security best practices for identity management, monitoring, threat detection, and secure operations.
• Build secure AWS architectures using services including IAM, KMS, CloudTrail, Config, and monitoring tools such as Sentry and Datadog.
• Deliver centralized logging, monitoring, and alerting, including threat modeling, vulnerability scanning, and penetration testing practices.
• Ensure AWS environments align to relevant security and compliance frameworks: CIS Benchmarks, NIST, HIPAA, FedRAMP, and SOC 2.
• Support incident detection, investigation, and response while maintaining audit trails across AWS accounts and services.
• Automate security controls and compliance checks using Infrastructure as Code tools such as Terraform and CloudFormation.
• Integrate security into CI/CD pipelines, partnering with engineering teams to enable secure build and deployment workflows.

Core skills and requirements

• U.S. Citizenship or Green Card required, with ability to obtain a Public Trust clearance.
• Bachelor’s degree in computer science, cybersecurity, engineering, or a related field, or 4 additional years of relevant experience in lieu of a degree.
• 6+ years of relevant experience in cloud security, cybersecurity, and AWS security.
• Strong knowledge of AWS services including EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53, IAM, CloudTrail, Config, and KMS.
• Experience supporting secure CI/CD pipelines, deployment automation, build troubleshooting, release coordination, and developer enablement.
• Hands-on experience with GitHub Actions, AWS CodeBuild, ArgoCD, Helm, Docker, secrets management, environment configuration, and Terraform templates.
• Ability to validate account handoffs, review pipeline configurations, verify secrets, support deployment dry runs, and assist with cutover and rollback planning.
• Strong scripting/development experience with Python, Bash, or similar languages.
• Proven ability to work independently and collaborate with cross-functional teams on complex security, operational, and reliability challenges.

Tools you’ll work with

AWS, IAM, KMS, CloudTrail, Config, Sentry, Datadog, Infrastructure as Code, Terraform, CloudFormation, CI/CD pipelines, GitHub Actions, AWS CodeBuild, ArgoCD, Helm, Docker, Python, Bash, along with EC2, S3, RDS, Lambda, ECS/EKS, CloudFront, Route 53.

Benefits

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Parental Leave
• 401(k) Retirement Plan
• Group Term Life and Travel Assistance
• Voluntary Life and AD&D Insurance
• Health Savings Account, Health Care & Dependent Care Flexible Spending Accounts
• Transit and Parking Commuter Benefits
• Short-Term & Long-Term Disability
• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Care.com annual membership
• Employee Assistance Program
• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance and ID theft protection, etc.)
• Position may be eligible for a discretionary variable incentive bonus

Nice to have

• AWS Certified Security – Specialty (highly desirable)
• AWS Certified Solutions Architect or DevOps Engineer certifications
• CISSP, CISM or GIAC certifications

Salary range: $92,000.00-$153,000.00 annually. Travel required: up to 10%. Clearance required: ability to obtain Public Trust. Job family: Software Development & Support.