# Senior Cloud Security Engineer

**Company**: GDIT
**Location**: Any Location / Remote
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Salary**: $124,093 - $149,500
**Category**: Security
**Industry**: Technology

**Apply**: https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Any-Location--Remote/Sr-Cloud-Security-Engineer_RQ231395-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_71ef151b-150

## Description

We are seeking an experienced Senior Cloud Security Engineer to design, implement, operate, and continuously improve security infrastructure across on-premises data centers and AWS environments supporting business and critical scientific workloads.

The ideal candidate is a hands-on engineer with strong expertise in AWS security, Palo Alto Networks firewalls, hybrid-cloud security architecture, Infrastructure as Code (IaC), and security automation. This role operates across both architecture and implementation - from defining security patterns and policies to configuring infrastructure, troubleshooting complex issues, and automating security operations.

**Responsibilities and Duties**

**Cloud & Network Security**

- Design and implement security controls for AWS multi-account and hybrid-cloud environments.

- Deploy and manage AWS security capabilities, including Network Firewall, WAF, Shield, Security Groups/NACLs, GuardDuty, Security Hub, CloudTrail, Config, IAM/Identity Center, KMS, VPC, and Transit Gateway controls.

- Design secure connectivity, segmentation, and security boundaries between AWS and on-premises environments.

**Security Architecture & Automation**

- Develop secure, resilient architectures spanning AWS and on-premises infrastructure using defense-in-depth and Zero Trust principles.

- Modernize environment to leverage Infrastructure as Code using technologies such as Terraform.

- Automate security operations, compliance reporting, configuration management, and policy enforcement using APIs, scripting, DevSecOps tooling, and AI-assisted engineering tools.

- Support security controls and evidence mapping aligned with frameworks such as NIST 800-53/800-171, FedRAMP, and FISMA.

- Evaluate existing security architectures and identify improvements in security, resiliency, scalability, performance, and operational efficiency.

**Operations & Incident Response**

- Troubleshoot complex cloud, network, firewall, and application-connectivity issues.

- Support security incidents, production outages, and root-cause analysis.

- Develop monitoring, logging, alerting, dashboards, runbooks, and engineering standards.

- Perform performance tuning, capacity planning, and security infrastructure lifecycle management.

- Participate in on-call or escalation support as required.

**Required Qualifications**

- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent professional experience.

- 5+ years of hands-on cloud security engineering experience.

- Demonstrated experience designing, deploying, managing, and troubleshooting AWS security services.

- Experience securing hybrid on-premises/AWS environments.

- Experience with Infrastructure as Code, scripting and security automation.

- Strong understanding of networking and security fundamentals, including TCP/IP, DNS, HTTP/HTTPS, network segmentation, VPNs, TLS/PKI, encryption, IAM, Zero Trust, and threat detection/prevention.

- Experience troubleshooting complex security and network issues.

- Must be able to obtain and maintain a Public Trust.

**Benefits**

- Medical plan options

- Dental plan options

- Vision plan

- 401(k) plan with company match

- Flexible work arrangements

- Paid time off plans

- Short and long-term disability benefits

- Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance

## Skills

### Required
- AWS Security
- AWS Network Firewall
- AWS Web Application Firewall (WAF)
- Network Security
- Security Engineering
- Infrastructure as Code
- Terraform
- scripting
- security automation
- Palo Alto Networks firewalls
- hybrid-cloud security architecture

### Nice to have
- Palo Alto Panorama
- Prisma Cloud
- Ansible
- Python
- Bash
- APIs
- CI/CD pipelines
- DevSecOps security practices
- container/Kubernetes security
- vulnerability management

---

Source: [Apply at gdit.wd5.myworkdayjobs.com](https://gdit.wd5.myworkdayjobs.com/en-US/External_Career_Site/job/Any-Location--Remote/Sr-Cloud-Security-Engineer_RQ231395-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)