Cloud Security Engineer 3

Base-2 Solutions is hiring a Cloud Security Engineer 3 to support the DOMEX Technology Platform. This onsite role in Bethesda, MD focuses on securing, hardening, and maintaining compliance for cloud-based platforms used in support of OSINT-focused mission systems.

Responsibilities

• Provide technical security expertise for cloud and cloud-native environments.
• Conduct security assessments, vulnerability management, and risk analysis for cloud-based systems operating across secure enclaves.
• Implement and manage security controls for Kubernetes clusters and containerized applications.
• Integrate security measures into CI/CD pipelines and support DevSecOps processes.
• Develop and maintain ATO packages and support compliance with NIST SP 800-37, NIST SP 800-53, CNSSI 1253, and ICD 503.
• Coordinate with compliance personnel, engineers, architects, and Government counterparts to ensure regulatory compliance.

Required Qualifications

• Active TS/SCI clearance with ability to obtain a CI Polygraph.
• Bachelor’s degree or equivalent with a minimum of six (6) years of experience in the category field; alternatively, three additional years of experience may substitute for the bachelor’s degree.
• At least one DoD 8570.01-M IAT Level II certification or higher.
• 2+ years working in the cloud, securely configuring and deploying AWS services.
• Demonstrated experience securing Kubernetes platforms and integrating security into CI/CD pipelines and containers, with understanding of microservices architecture and service mesh.
• Experience with RMF, vulnerability management, and cloud compliance/security best practices.

Technology Stack

• AWS, Kubernetes, CI/CD pipelines, DevSecOps
• NIST SP 800-37, NIST SP 800-53, CNSSI 1253, ICD 503
• RMF, microservices architecture, service mesh
• Splunk, Nessus, SonarQube, Prisma Cloud
• DAST, SAST, Zero Trust framework
• Generative AI

Preferred Qualifications

• Multiple IAT/IAM II or III advanced certifications such as CISSP-ISSAP/ISSEP, CISM, CCSP, or SecurityX/CASP+ CE.
• AWS Solutions Architect or AWS Security Specialty certifications.
• Kubernetes certifications including KCNA, CKA, or CKS.
• Linux administration experience and certifications such as Linux+ or Red Hat credentials including RHCSA or RHCE.
• Experience using security tools including Splunk, Nessus, SonarQube, Prisma Cloud, DAST, and SAST tooling.
• Experience applying the Zero Trust framework to secure systems.
• Prior network engineering experience.
• Experience applying security controls to Generative AI implementations.

Education and Experience Equivalency

• High School Diploma/GED: 9 years of experience
• Associate’s Degree: 9 years of experience
• Bachelor’s Degree: 6 years of experience
• Master’s Degree: 6 years of experience
• PhD: 6 years of experience

Benefits

• Competitive fixed salary or hourly pay (based on experience, skills, location, and internal equity).
• Employee referral bonuses up to $10,000 per hired referral.
• Additional bonus opportunities for exceptional performance and contributions to business development and company growth (role-dependent).
• 100% company-paid medical premiums for employees and eligible dependents.
• Medical plan options through CareFirst, Kaiser, and UnitedHealthcare, including PPO, POS, HMO, and HSA-compatible plans.
• 100% company-paid dental premiums for employees and eligible dependents.
• 100% company-paid vision premiums for employees and eligible dependents.
• 100% company-paid premiums for short-term disability.
• 100% company-paid premiums for long-term disability.
• 100% company-paid premiums for accidental death & dismemberment (AD&D).
• 100% company-paid life insurance up to $200,000.
• 401(k) with immediate vesting: 4% company match plus a 4% non-elective company contribution (8% total).
• 401(k) pre-tax and Roth options.
• Up to 20 days of flexible paid time off (PTO).
• 11 paid floating holidays.
• Flexible work schedules, including flex time and compressed work periods (contract and project-dependent).