Space Telescope Science Institute

Cloud Engineer

• Lead cloud security automation initiatives for NASA flagship space telescope missions
• Design, implement, and operate security controls, guardrails, and monitoring systems across AWS cloud applications and environments
• Build secure-by-default paved-road tooling for mission and science teams
• Own solutions from concept through production
• Serve as technical lead for cloud security automation and partner with software, security, and DevOps engineers
• Design, deploy, and secure Amazon EKS workloads, including cluster hardening, workload identity, admission control, and runtime protection
• Build reusable platform engineering modules and self-service capabilities
• Build and maintain infrastructure as code with security controls and guardrails expressed as code
• Embed automated security testing and policy enforcement into CI/CD pipelines
• Build and operate automated incident response workflows covering detection, triage, containment, and remediation
• Evaluate and implement agentic AI capabilities for security engineering and operational tasks with guardrails and human review
• Collaborate across engineering, IT, and security teams and engage internal customers to identify needs and increase impact

Principal Cloud Engineer