5+ years in engineering, including 3+ years of hands-on AWS experience.
Strong knowledge of AWS IAM, KMS, logging, and cloud security architecture.
Experience reviewing technical implementations against security requirements.
Hands-on AWS cloud experience in highly controlled environments.
Active TS/SCI clearance required.
Responsibilities
Design and enhance AWS IAM policies and encryption controls.
Review cloud architectures for security vulnerabilities.
Support documentation for security assessments.
Collaborate with engineering teams to integrate security guardrails into workflows.
Translate security requirements into practical solutions.
Benefits
Ongoing learning and development opportunities.
Competitive health benefits.
Flexible work arrangements.
Part of a virtue-centered team culture.
Full Job Description
Job Type
Full-time
Description
Are you ready to put your AWS expertise to work on cloud challenges that few engineers get the chance to tackle?
Virtual Service Operations (VSO) is seeking an experienced AWS Cloud Security & Guardrails Engineer to join a highly skilled team delivering advanced cloud engineering capabilities for a mission-critical, security-sensitive initiative. Help shape the security architecture of sophisticated AWS platforms from the ground up. You will translate security requirements into practical identity, encryption, and observability guardrails that engineering teams can build on with confidence. You will work with experienced technical partners in a collaborative environment where careful engineering and measurable results matter.
Key Responsibilities:
Design and improve AWS IAM policies, encryption controls, and centralized logging patterns.
Review cloud architectures and infrastructure code for security risks.
Support security assessment documentation and evidence collection.
Partner with engineering teams to embed reusable security guardrails in deployment workflows.
Qualifications:
5+ years in engineering, including 3+ years of hands-on AWS experience.
Strong AWS IAM, KMS, logging, and cloud security architecture knowledge.
Experience reviewing technical implementations against security requirements.
Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.
Preferred Qualifications:
Experience with automated policy validation or infrastructure-as-code security.
Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.
Requirements
Active TS/SCI clearance; must be eligible for applicable SCI read-on/indoctrination and additional program-specific access approvals.
Must reside within commuting distance of one of the following 4 approved secure work locations: Herndon, VA; Washington, DC; Seattle, WA; or Denver, CO.
Regular on-site work in an approved secure facility and occasional work at authorized customer facilities may be required. This is not a remote position.
Full-time position, on-site
Please note that pursuant to a government contract, this specific position requires U.S. citizenship status
What is Important to Us:
You are an excellent communicator in writing and speaking.
You have the ability to work independently but also value teamwork.
Your problem-solving skills are excellent.
You are looking for a job where performance appraisals occur regularly, and you look forward to advancing your career.
You seek a community of virtue-centered co-workers and clients.
What we offer you: As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone . We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.
