Sr Cloud Security Engineer

GDIT is seeking a Senior Cloud Security Engineer to design, implement, operate, and continuously improve security infrastructure across on-premises data centers and AWS.

Responsibilities

• Design and implement security controls for AWS multi-account and hybrid-cloud environments
• Deploy and manage AWS security capabilities, including Network Firewall, WAF, Shield, Security Groups/NACLs, GuardDuty, Security Hub, CloudTrail, Config, IAM/Identity Center, KMS, VPC, and Transit Gateway controls
• Design secure connectivity, segmentation, and security boundaries between AWS and on-premises environments
• Design, deploy, manage, and optimize Palo Alto Networks next-generation firewalls, including security policies, NAT, routing, VPN, application controls, threat prevention, and URL filtering
• Manage firewall high availability, upgrades, lifecycle, capacity, and policy optimization
• Develop secure, resilient architectures across AWS and on-premises using defense-in-depth and Zero Trust principles
• Modernize environments with Infrastructure as Code using technologies such as Terraform
• Automate security operations, compliance reporting, configuration management, and policy enforcement using APIs, scripting, DevSecOps tooling, and AI-assisted engineering tools
• Support security controls and evidence mapping aligned with NIST 800-53/800-171, FedRAMP, and FISMA
• Assess existing security architectures and recommend improvements across security, resiliency, scalability, performance, and operational efficiency
• Troubleshoot complex cloud, network, firewall, and application-connectivity issues
• Support security incidents, production outages, and root-cause analysis
• Develop monitoring, logging, alerting, dashboards, runbooks, and engineering standards
• Perform performance tuning, capacity planning, and security infrastructure lifecycle management
• Participate in on-call or escalation support as required

Requirements

• Bachelor’s degree and 5+ years of hands-on cloud security engineering experience (or 8+ years in cloud security engineering in lieu of degree)
• Demonstrated experience designing, deploying, managing, and troubleshooting AWS security services and Palo Alto Networks firewalls
• Experience securing hybrid on-premises/AWS environments
• Experience with Infrastructure as Code, scripting, and security automation
• Strong networking and security fundamentals: TCP/IP, DNS, HTTP/HTTPS, network segmentation, VPNs, TLS/PKI, encryption, IAM, Zero Trust, and threat detection/prevention
• Ability to troubleshoot complex security and network issues
• Must be able to obtain and maintain Public Trust

Technologies

• Amazon Web Services (AWS)
• AWS Network Firewall
• AWS Web Application Firewall (WAF)
• AWS Shield
• AWS Security Groups/NACLs
• GuardDuty
• Security Hub
• CloudTrail
• Config
• IAM/Identity Center
• KMS
• VPC
• Transit Gateway
• Palo Alto Networks
• Palo Alto Networks next-generation firewalls
• Infrastructure as Code (IaC)
• Terraform
• APIs
• scripting
• DevSecOps tooling
• NIST 800-53
• NIST 800-171
• FedRAMP
• FISMA
• TCP/IP
• DNS
• HTTP/HTTPS
• VPNs
• TLS/PKI
• IAM
• Zero Trust

Security Clearance

• Clearance Level: None
• Public Trust: NACI (T1)

Job Details

• Requisition Type: Regular
• Location: Rockville, Maryland (Hybrid Workplace)
• Work setup: Mostly remote, with requirement to be within commuting distance to Rockville, MD for occasional onsite requirements
• Travel Required: Less than 10%
• Years of Experience: 5+ years of related experience (may vary based on technical training, certification(s), or degree)
• Salary Range: $124,093 - $149,500 per year