Description
We are seeking an experienced Senior Cloud Security Engineer to design, implement, operate, and continuously improve security infrastructure across on-premises data centers and AWS environments supporting business and critical scientific workloads.
The ideal candidate is a hands-on engineer with strong expertise in AWS security, Palo Alto Networks firewalls, hybrid-cloud security architecture, Infrastructure as Code (IaC), and security automation. This role operates across both architecture and implementation - from defining security patterns and policies to configuring infrastructure, troubleshooting complex issues, and automating security operations.
Responsibilities and Duties
Cloud & Network Security
- Design and implement security controls for AWS multi-account and hybrid-cloud environments.
- Deploy and manage AWS security capabilities, including Network Firewall, WAF, Shield, Security Groups/NACLs, GuardDuty, Security Hub, CloudTrail, Config, IAM/Identity Center, KMS, VPC, and Transit Gateway controls.
- Design secure connectivity, segmentation, and security boundaries between AWS and on-premises environments.
Security Architecture & Automation
- Develop secure, resilient architectures spanning AWS and on-premises infrastructure using defense-in-depth and Zero Trust principles.
- Modernize environment to leverage Infrastructure as Code using technologies such as Terraform.
- Automate security operations, compliance reporting, configuration management, and policy enforcement using APIs, scripting, DevSecOps tooling, and AI-assisted engineering tools.
- Support security controls and evidence mapping aligned with frameworks such as NIST 800-53/800-171, FedRAMP, and FISMA.
- Evaluate existing security architectures and identify improvements in security, resiliency, scalability, performance, and operational efficiency.
Operations & Incident Response
- Troubleshoot complex cloud, network, firewall, and application-connectivity issues.
- Support security incidents, production outages, and root-cause analysis.
- Develop monitoring, logging, alerting, dashboards, runbooks, and engineering standards.
- Perform performance tuning, capacity planning, and security infrastructure lifecycle management.
- Participate in on-call or escalation support as required.
Required Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent professional experience.
- 5+ years of hands-on cloud security engineering experience.
- Demonstrated experience designing, deploying, managing, and troubleshooting AWS security services.
- Experience securing hybrid on-premises/AWS environments.
- Experience with Infrastructure as Code, scripting and security automation.
- Strong understanding of networking and security fundamentals, including TCP/IP, DNS, HTTP/HTTPS, network segmentation, VPNs, TLS/PKI, encryption, IAM, Zero Trust, and threat detection/prevention.
- Experience troubleshooting complex security and network issues.
- Must be able to obtain and maintain a Public Trust.
Benefits
- Medical plan options
- Dental plan options
- Vision plan
- 401(k) plan with company match
- Flexible work arrangements
- Paid time off plans
- Short and long-term disability benefits
- Life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance