Who You AreOntic is seeking a Senior Cloud Security Engineer to lead the maturation of our AWS cloud security program. This role will assess, design and automate security controls, partner closely with Engineering and DevOps teams, and build the technical foundation required for continuous compliance, FedRAMP readiness, and secure cloud operations. This is an individual contributor role focused on building scalable security capabilities-not simply operating security tools.
Responsibilities- Design and implement cloud security controls across AWS.
- Build security automation using infrastructure as code, APIs, and scripting.
- Lead cloud security posture management and continuous improvement.
- Integrate security into CI/CD pipelines and engineering workflows.
- Develop continuous evidence collection supporting FedRAMP and other continuous compliance initiatives.
- Partner with engineering teams on secure architecture and cloud best practices.
- Improve cloud monitoring, detection, and security metrics.
- Support customer security requirements and compliance initiatives, including SOC 2, ISO 27001, and FedRAMP.
Success Criteria- Cloud security controls are automated, repeatable and auditable.
- Continuous evidence collection reduces manual audit effort.
- Security is embedded into engineering workflows.
- AWS security posture improves through measurable automation and engineering-driven controls.
- Ontic is positioned to mature toward modern FedRAMP continuous authorization practices.
Preferred Qualifications- AWS cloud security expertise required.
- Direct FedRAMP Moderate or High experience preferred.
- Knowledge and understanding of FedRAMP CR-26 and/or 20x preferred.
- AWS Bedrock experience preferred.
- Infrastructure as code, with Terraform preferred.
- Security automation and scripting.
- CI/CD security integration.
- Cloud detection and monitoring.
- Experience supporting regulated SaaS environments and cloud compliance initiatives.
Ontic Benefits & PerksCompetitive Salary
Medical, Vision & Dental Benefits
401k
Stock Options
HSA Contribution
Learning Stipend
Flexible PTO Policy
Quarterly company ME (mental escape) days
Generous Parental Leave policy
Home Office Stipend
Mobile Phone Reimbursement
Home Internet Reimbursement for Remote Employees
Anniversary & Milestone Celebrations
