Affinity

4536 Cloud Security Engineer

Affinity • $120K — $145K *
San Antonio, TX 78228In-Person
Information Technology
8 - 10 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • Bachelor's degree in Cybersecurity, Computer Science, or related field.
  • DoD 8140/8570 IAT Level II certification and AWS certification required.
  • Extensive knowledge and technical leadership in cloud security engineering.
  • 10+ years of relevant experience in cloud environments, particularly AWS.
  • Proficient in GitLab CI, Terraform, and Ansible.
  • Experience in continuous monitoring and risk management frameworks (RMF, ATO, cATO).
  • Strong background in advanced networking, VPC, peering, and subnet design.

Responsibilities

  • Lead zero trust engineering and interoperability initiatives to enhance security posture.
  • Design and maintain AWS cloud architecture using Terraform and Ansible.
  • Administer AWS cloud infrastructure and apply advanced networking designs.
  • Support SIEM and Incident Management systems for security integration.
  • Architect logging and monitoring systems in collaboration with Cyber Security Service Providers.
  • Drive security automation and evidence collection for continuous monitoring improvement.
  • Collaborate with cross-functional teams to implement cloud security controls and best practices.

Benefits

  • Flexible reach-back support across cybersecurity programs.
  • Collaborative environment with cross-functional team interaction.
  • Opportunity to influence cloud security modernization at a government level.
  • Focused on developing and maintaining cutting-edge security capabilities.
  • Chance to work with advanced tools and technologies in cloud security.
Full Job Description
4536 Cloud Security Engineer
4536 | TS/SCI

Job Description:

OVERVIEW:

We are seeking a Cloud Security Engineer to support one of our cybersecurity programs. You will lead zero trust engineering, interoperability, and modern security capability development across the government enterprise. You will manage security systems and tools for cloud technologies, investigate and enhance existing cloud structures, and drives issue identification/resolution, integration, gap assessment, and continuous improvement, while providing flexible reach-back across the government's Cyber Assessment Roadmap. This position sets the engineering direction for the Government's zero trust and cloud security modernization, translating roadmap objectives into deployed, measurable capability.

GENERAL DUTIES:

  • Lead zero trust engineering and interoperability initiatives, future-proofing implementations as tools and requirements evolve.
  • Design, implement, and maintain AWS cloud architecture using Terraform (including custom modules) and Ansible.
  • Administer relevant cloud infrastructure-level consoles (e.g., AWS) and secure cloud services and accounts; apply advanced networking, VPC, peering, and subnet design.
  • Support the SIEM, SOAR, Incident Management System (IMS), and Incident Response Team (IRT) roadmap, engineering, and integration.
  • Architect logging, monitoring, and telemetry, coordinating delivery with the Cyber Security Service Provider (CSSP).
  • Advance security automation and automated evidence collection to increase inheritance and continuous monitoring maturity.
  • Provide flexible SME support and reach-back across DevSecOps automation, supply chain security, enterprise vulnerability management, and AI.
  • Provide updates to the Cyber Assessment Roadmap; create/maintain documentation and brief technical and non-technical stakeholders.
  • Collaborate with ISSMs, ISSEs, Value Stream engineers, COT, CPT, and Government stakeholders using tools like git.
  • Support Zero Trust enforcement, cloud security controls, and Infrastructure as Code security across mission environments.
  • Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness.
  • Architect and integrate an enterprise SIEM ingesting logs from AWS (VPC, EKS, CloudTrail), Okta, Istio, GitLab, and host logs (systemd, audit), with dashboards for runtime monitoring, defense, and forensics.
  • Enforce Zero Trust through ICAM integration and micro-segmentation validation and manage enterprise security tooling.


REQUIRED QUALIFICATIONS:

  • Bachelor's degree in Cybersecurity, Computer Science, Cloud Computing, IT, or related technical field.
  • DoD 8140/8570 IAT Level II and an AWS certification.
  • Subject Matter Expert: provides technical and management leadership on major tasks; domain and expert technical knowledge; decisions may have critical project impact; may lead others.
  • Highly experienced with AWS; advanced networking, VPC, peering, and subnet experience.
  • GitLab CI experience; Terraform experience including writing custom modules and collaboration at scale; Ansible experience.
  • Proficient in Linux; SRE experience for a mid-to-large enterprise system.
  • Designing, implementing, and maintaining AWS cloud architecture; creating/maintaining implementation documentation.
  • Experience supporting RMF, ATO, cATO, and continuous monitoring; SIEM and security automation (familiarity with SOAR/IMS).
  • Minimum years of experience - 10 years of relevant experience.


DESIRED QUALIFICATIONS:

  • Advanced degree in a related technical field.
  • AWS Certified Security - Specialty, CCSP, CISSP, CKS, or CKA.
  • General cloud architecture experience with Azure or GCP (a plus, not required); experience with Kubernetes and Docker.
  • Knowledge of SQL databases and coding skills (Java, Python, Go, C++); microservices architectures.
  • Security framework experience (RMF, DISA STIG, CIS Benchmarks); software engineering background.
  • Experience engineering SOAR/IMS and supporting Incident Response Teams (IRT); applying AI/ML to security automation.
  • Experience supporting software factory environments (Iron Bank, Big Bang); IL4/IL5/IL6 cloud environments.


CLEARANCE:

  • Active TS/SCI clearance minimum required


Job Details

City : San Antonio

State : Texas

About Affinity

Affinity’s patented technology structures and analyzes millions of data points across emails, calendars, and third-party sources to offer users the tools they need to automatically manage their most valuable relationships, prioritize important connections, and discover untapped opportunities. Affinity uses artificial intelligence to analyze relationship strength and illuminate the best paths to warm introductions. The platform also offers a holistic view of users’ networks in a centralized, automatically updated database without any manual upkeep. Founded in 2014, Affinity is headquartered in San Francisco, California. Affinity has raised $120M to date and is backed by leading investors including Menlo Ventures, Advance Venture Partners, 8VC and MassMutual Ventures. It has over 2,700 customers in 70 countries, including venture capital firms such as Bain Capital Ventures and Kleiner Perkins, private equity firms such as SoftBank Group, investment bankers such as Woodside Capital Partners, financial services firms such as Fidelity Investments, real estate companies such as Tishman Speyer, insurers such as American Family Insurance and enterprises such as Nike, Qualcomm and Twilio. Affinity has been named in Fortune Magazine's Best Workplaces, Inc. Magazine's Best Workplaces and editor's number one pick, the Data Breakthrough Award, BIG Innovation Award and others.
Learn more about Affinity
Size
1,000 employees
Industry
Enterprise Technology
Founded
2014
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at Affinity

More Information Technology Jobs

Find similar 4536 Cloud Security Engineer jobs:

NationwideSan Antonio, TX