Security Configuration Management Engineer Jobs

1 job found

Today

Sr Cloud Security Engineer

General Dynamics Information Technology Rockville, MD

Rockville, MD

Today

$124k - $150k/yr Full time Aws Cloud Aws Cloud Security Cloud Network Security

Apply Now

Job Description

GDIT is seeking a Senior Cloud Security Engineer to design, implement, operate, and continuously improve security infrastructure across on-premises data centers and AWS.

Responsibilities

Design and implement security controls for AWS multi-account and hybrid-cloud environments
Deploy and manage AWS security capabilities, including Network Firewall, WAF, Shield, Security Groups/NACLs, GuardDuty, Security Hub, CloudTrail, Config, IAM/Identity Center, KMS, VPC, and Transit Gateway controls
Design secure connectivity, segmentation, and security boundaries between AWS and on-premises environments
Design, deploy, manage, and optimize Palo Alto Networks next-generation firewalls, including security policies, NAT, routing, VPN, application controls, threat prevention, and URL filtering
Manage firewall high availability, upgrades, lifecycle, capacity, and policy optimization
Develop secure, resilient architectures across AWS and on-premises using defense-in-depth and Zero Trust principles
Modernize environments with Infrastructure as Code using technologies such as Terraform
Automate security operations, compliance reporting, configuration management, and policy enforcement using APIs, scripting, DevSecOps tooling, and AI-assisted engineering tools
Support security controls and evidence mapping aligned with NIST 800-53/800-171, FedRAMP, and FISMA
Assess existing security architectures and recommend improvements across security, resiliency, scalability, performance, and operational efficiency
Troubleshoot complex cloud, network, firewall, and application-connectivity issues
Support security incidents, production outages, and root-cause analysis
Develop monitoring, logging, alerting, dashboards, runbooks, and engineering standards
Perform performance tuning, capacity planning, and security infrastructure lifecycle management
Participate in on-call or escalation support as required

Requirements

Bachelor’s degree and 5+ years of hands-on cloud security engineering experience (or 8+ years in cloud security engineering in lieu of degree)
Demonstrated experience designing, deploying, managing, and troubleshooting AWS security services and Palo Alto Networks firewalls
Experience securing hybrid on-premises/AWS environments
Experience with Infrastructure as Code, scripting, and security automation
Strong networking and security fundamentals: TCP/IP, DNS, HTTP/HTTPS, network segmentation, VPNs, TLS/PKI, encryption, IAM, Zero Trust, and threat detection/prevention
Ability to troubleshoot complex security and network issues
Must be able to obtain and maintain Public Trust

Technologies

Amazon Web Services (AWS)
AWS Network Firewall
AWS Web Application Firewall (WAF)
AWS Shield
AWS Security Groups/NACLs
GuardDuty
Security Hub
CloudTrail
Config
IAM/Identity Center
KMS
VPC
Transit Gateway
Palo Alto Networks
Palo Alto Networks next-generation firewalls
Infrastructure as Code (IaC)
Terraform
APIs
scripting
DevSecOps tooling
NIST 800-53
NIST 800-171
FedRAMP
FISMA
TCP/IP
DNS
HTTP/HTTPS
VPNs
TLS/PKI
IAM
Zero Trust

Security Clearance

Clearance Level: None
Public Trust: NACI (T1)

Job Details

Requisition Type: Regular
Location: Rockville, Maryland (Hybrid Workplace)
Work setup: Mostly remote, with requirement to be within commuting distance to Rockville, MD for occasional onsite requirements
Travel Required: Less than 10%
Years of Experience: 5+ years of related experience (may vary based on technical training, certification(s), or degree)
Salary Range: $124,093 - $149,500 per year

View full job page →

Get Security Configuration Management Engineer Jobs alerts

New Security Configuration Management Engineer Jobs, daily.