Apply on Employer Site

The Judge Group · 14 hours ago

Sr. Cloud Security Engineer (1114759)

Washington, DC

Full-time

Onsite

Senior Level, Lead/Staff

$150K/yr - $170K/yr

8+ years exp

The Judge Group is seeking a Sr. Cloud Security Engineer to serve as a technical leader for securing and scaling cloud platforms supporting a mission-critical federal program. This role focuses on cloud security architecture, DevSecOps automation, and secure platform enablement across commercial and government cloud environments.

E-LearningInformation TechnologyProfessional Services

No H1B

Security Clearance Required

Responsibilities

Define secure patterns, embed security into CI/CD pipelines, and partner closely with platform, application, and compliance teams to ensure security is built in — not bolted on

Qualification

Cloud security architectureAWSAzureGCPInfrastructure as codeNative cloud security toolsIAM/RBACNIST 800-53Kubernetes securitySecurity certificationsCommunication skillsLeadership skills

Required

Active Secret security clearance

8+ years of experience in cybersecurity or cloud engineering, with 5+ years focused on cloud security

Deep hands-on advanced experience securing and automating one or more cloud environments (AWS, Azure, GCP)

Strong experience with native cloud security tools (AWS Security Hub, GuardDuty, Defender for Cloud, Azure Policy, etc.)

Strong experience with infrastructure as code (Terraform, CloudFormation, ARM/Bicep) and integrating security into CI/CD pipelines (GitLab, GitHub Actions, etc.)

Technical experience with IAM/RBAC, key management (KMS/Key Vault/Cloud KMS), networking (VPC/VNET), and encryption

Familiarity aligning security controls with NIST 800-53, FedRAMP, CIS Benchmarks, or equivalent frameworks

Strong communication and leadership skills and ability to influence technical and non-technical stakeholders

Preferred

Experience securing GovCloud, DoD IL6, or other regulated cloud environments

Experience with Kubernetes and container security (OPA/Gatekeeper, PodSecurityStandards, Prisma, Twistlock, etc.)

Familiarity with zero trust architectures and enterprise identity platforms (Okta, Entra ID, AWS SSO)

Experience with ServiceNow integrations for security workflows

Certifications such as AWS Certified Security - Specialty, Azure Security Engineer Associate, Google Professional Cloud Security Engineer, OSCP, or CISSP