AWS Cloud Security Engineer

Booz Allen Hamilton

. Support hands-on AWS cloud security assessments and engineering programs for large enterprise environments .

Posted 10/9/2026full-timeUnited StatesMid-LevelSenior💰 $69,300 - $158,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in AWS cloud security assessments, engineering, and infrastructure as code, with a strong focus on developing secure configurations and policies. Proficient in collaborating with cross-functional teams to enhance security postures and optimize cloud environments.

Highest-signal resume keywords

AWS Cloud SecurityInfrastructure As CodeTerraform DevelopmentAWS Security ServicesCloud Security Standards

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS OrganizationsIAMVPC NetworkingCloudTrailGuardDutyKMSTerraformPython ScriptingAWS CloudFormationSecurity Policies

Soft Skills

CollaborationCommunicationProblem-Solving

Tools & Technologies

AWS CLIAWS SDKsCloud Security PlatformsCI/CD PipelinesGit Workflows

Certifications & Qualifications

Bachelor’s Degree in Computer ScienceCybersecurityInformation TechnologyEngineeringInformation Systems

Industry Keywords

NISTCIS BenchmarksISO 27001FedRAMPCloud Security Control Frameworks

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityDNSPythonTerraform

About the role

Key responsibilities & impact

Support hands-on AWS cloud security assessments and engineering programs for large enterprise environments
Review AWS Organizations, accounts, landing zones, identity, networking, security services, workloads, policies, Infrastructure as Code, and existing security tooling
Identify cloud security gaps and opportunities to strengthen clients’ security posture
Work with AWS Organizations, IAM, IAM Identity Center, Service Control Policies, VPC networking, CloudTrail, Config, GuardDuty, Security Hub, KMS, Systems Manager, and other AWS-native services
Establish minimum secure configuration baselines for AWS services
Develop reusable Terraform and Infrastructure as Code
Create security policies and preventive guardrails
Evaluate existing cloud security tooling and optimize its use
Develop implementation-ready technical documentation
Support AWS security assessments, landing zone reviews, identity and access management, network security, SCP development, secure service baselines, security automation, application architecture reviews, tooling optimization, and cloud governance
Translate technical requirements into scalable, repeatable engineering solutions
Collaborate with cloud architects, security engineers, cloud platform teams, security stakeholders, application owners, governance teams, and client leadership
Support continued secure adoption of AWS

Requirements

What you’ll need

3+ years of experience with AWS cloud engineering, cloud security, infrastructure engineering, DevSecOps, site reliability engineering, or enterprise cloud delivery
Experience with AWS Organizations, organizational units, multi-account environments, IAM, roles, policies, Service Control Policies, or cross-account access
Experience with AWS networking, including VPCs, subnets, security groups, routing, Transit Gateway, private connectivity, DNS, load balancing, or ingress and egress controls
Experience with AWS security and monitoring services, including CloudTrail, AWS Config, GuardDuty, Security Hub, KMS, IAM Access Analyzer, CloudWatch, Systems Manager, or AWS Inspector
Experience developing or reviewing Terraform, AWS CloudFormation, or Infrastructure as Code
Experience assisting with cloud security standards, secure configuration baselines, technical guardrails, policies, or reusable security patterns
Experience with scripting or automation using Python, Bash, PowerShell, AWS CLI, SDKs, APIs, or engineering tools
Experience assessing technical environments, identifying security or architecture gaps, and translating findings into recommendations, implementation steps, or technical documentation
Ability to work directly with cloud engineers, architects, cybersecurity teams, application teams, governance stakeholders, and client leadership
Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or Information Systems
Experience with AWS IAM Identity Center, SAML, OIDC, permission sets, privileged access, enterprise federation, or identity governance
Experience designing, reviewing, or supporting AWS landing zones, AWS Control Tower, account vending, centralized logging, shared services, or enterprise AWS platform architectures
Experience developing AWS Service Control Policies, IAM policies, resource policies, permission boundaries, or preventive cloud security controls
Experience developing secure baselines and Infrastructure as Code for multiple AWS services in a large enterprise environment
Experience with cloud security platforms such as Wiz, Prisma Cloud, Orca Security, Lacework, CSPM, or CNAPP technologies
Experience integrating security requirements into CI/CD pipelines, Git workflows, DevSecOps processes, automated testing, or policy-as-code
Experience with NIST, CIS Benchmarks, ISO 27001, FedRAMP, or cloud security control frameworks
Experience reviewing application architectures, dependencies, and infrastructure components
Experience supporting large enterprise, Fortune 500, regulated, or multi-account cloud environments
Knowledge of Microsoft Azure or Google Cloud security
Must complete identity verification and be on camera during interviews and assessments
AI tools are prohibited during interviews unless permission is explicitly provided

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards for exceptional performance and superior demonstration of values
Identity verification process using advanced biometrics and artificial intelligence
Camera-on expectation during interviews and assessments
Select benefit offerings for eligible employees working fewer than 20 hours per week