Senior Cloud Security Engineer

General Dynamics Information Technology

. Design, implement, operate, and continuously improve security infrastructure across on-premises data centers and AWS environments .

Posted 10/27/2026full-timeRockville • Maryland • United StatesSenior💰 $124,093 - $149,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing security infrastructure for AWS and hybrid environments, utilizing Infrastructure as Code and automation tools. Proficient in security controls, compliance frameworks, and troubleshooting complex security issues.

Highest-signal resume keywords

AWS Security Services ManagementInfrastructure As Code (Terraform)Security Automation and ScriptingNIST Compliance FrameworksZero Trust Architecture

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security EngineeringNetwork SegmentationThreat Detection/PreventionTCP/IPIAMVPNsEncryptionSecurity Incident ResponsePerformance TuningCapacity Planning

Tools & Technologies

AWS Network FirewallWAFGuardDutySecurity HubCloudTrailTerraformAnsiblePythonBashSIEM/SOAR

Certifications & Qualifications

Palo Alto Networks CertificationsAWS Security/Architecture Certifications

Industry Keywords

NIST 800-53FedRAMPFISMADevSecOpsHybrid Cloud Security

Tech Stack

Tools & technologies

AnsibleAWSCloudCyber SecurityDNSKubernetesPythonTCP/IPTerraform

About the role

Key responsibilities & impact

Design, implement, operate, and continuously improve security infrastructure across on-premises data centers and AWS environments
Design and implement security controls for AWS multi-account and hybrid-cloud environments
Deploy and manage AWS Network Firewall, WAF, Shield, Security Groups/NACLs, GuardDuty, Security Hub, CloudTrail, Config, IAM/Identity Center, KMS, VPC, and Transit Gateway controls
Design secure connectivity, segmentation, and security boundaries between AWS and on-premises environments
Develop secure, resilient AWS and on-premises architectures using defense-in-depth and Zero Trust principles
Modernize the environment using Infrastructure as Code technologies such as Terraform
Automate security operations, compliance reporting, configuration management, and policy enforcement using APIs, scripting, DevSecOps tooling, and AI-assisted engineering tools
Support security controls and evidence mapping aligned with NIST 800-53/800-171, FedRAMP, and FISMA
Evaluate security architectures and identify improvements in security, resiliency, scalability, performance, and operational efficiency
Troubleshoot complex cloud, network, firewall, and application-connectivity issues
Support security incidents, production outages, and root-cause analysis
Develop monitoring, logging, alerting, dashboards, runbooks, and engineering standards
Perform performance tuning, capacity planning, and security infrastructure lifecycle management
Participate in on-call or escalation support as required

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent professional experience
5+ years of hands-on cloud security engineering experience
Demonstrated experience designing, deploying, managing, and troubleshooting AWS security services
Experience securing hybrid on-premises/AWS environments
Experience with Infrastructure as Code, scripting, and security automation
Strong understanding of TCP/IP, DNS, HTTP/HTTPS, network segmentation, VPNs, TLS/PKI, encryption, IAM, Zero Trust, and threat detection/prevention
Experience troubleshooting complex security and network issues
Must be able to obtain and maintain a Public Trust
Must be within commuting distance to Rockville, MD for occasional onsite requirements
Must provide onsite fingerprinting at a designated facility
Preferred: Palo Alto Panorama, Prisma Cloud, or related Palo Alto technologies
Preferred: centralized AWS security architectures in multi-account environments
Preferred: Terraform, Ansible, Python, Bash, APIs, or other infrastructure/security automation technologies
Preferred: SIEM/SOAR integrations
Preferred: CI/CD pipelines and DevSecOps security practices
Preferred: container/Kubernetes security and vulnerability management
Preferred: NIST, FISMA, FedRAMP, or similar compliance frameworks
Preferred: LLMs, AI agents, or generative AI tools
Preferred: Palo Alto Networks or AWS security/architecture certifications, or equivalent practical experience
US citizenship is not required

Benefits

Comp & perks

Medical plan options, some with Health Savings Accounts
Dental plan options
Vision plan
401(k) plan with pre-tax and post-tax contributions and company match
Full flex work weeks where possible
Vacation, sick, personal, holiday, paid parental, military, bereavement, and jury duty leave
Typically 15 days of paid leave per calendar year
10 paid holidays per year
Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees
Short- and long-term disability benefits
Life insurance
Accidental death and dismemberment insurance
Personal accident insurance
Critical illness insurance
Business travel and accident insurance