Cloud Security Engineer

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Peraton is seeking a Cloud Security Engineer in our Linthicum, MD office in support of our Department of Defense (DoD) customer as part of a highly talented, highly motivated, and high-performing team. This position offers a unique opportunity to work at the forefront of cyber investigations, digital forensics, cyber threat analysis, and mission support in a dynamic and collaborative environment. The successful candidate will contribute to protecting national security interests by leveraging technical expertise, analytical skills, and innovative problem-solving to address complex cyber challenges. Individuals who are passionate about cybersecurity, committed to excellence, and eager to make a meaningful impact are encouraged to apply.

This Cloud Security Engineer is needed to assist in the planning, building, management, and continuous security improvement of the DC3 Cloud Environment in support of a Department of War customer. The position supports mission-focused cybersecurity activities, including cloud security engineering, cyber threat analysis, digital forensics support, and protection of national-security systems and data.

The Cloud Security Engineer will address the cybersecurity of cloud deployments by ensuring that cloud design, configuration, implementation, data controls, monitoring, logging, networking, storage, and overall architecture comply with applicable Department of War regulations, the Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and other applicable security requirements.

The engineer will configure, integrate, and maintain tools that identify, scan, prioritize, and remediate vulnerabilities in production deployments and Continuous Integration/Continuous Delivery (CI/CD) pipelines. The position will apply appropriate cybersecurity controls and collaborate with cloud architecture, development, operations, and security teams to ensure cloud environments are properly designed, hardened, monitored, and secured throughout the system lifecycle.

Responsibilities

Support the planning, design, implementation, hardening, and management of secure cloud environments.
• Assess and implement cybersecurity controls across cloud infrastructure, applications, networks, storage, identity services, and data-management components.
• Ensure cloud deployments comply with applicable Department of War cybersecurity requirements, RMF controls, STIGs, and security best practices.
• Support Authorization to Operate (ATO) and Continuous ATO activities, including development and maintenance of required security documentation and evidence.
• Configure and maintain tools for vulnerability scanning, assessment, remediation tracking, and continuous monitoring.
• Integrate cybersecurity tooling into CI/CD pipelines used by development teams to deploy cloud-based solutions.
• Support secure AWS cloud migration activities.
• Implement and maintain cloud logging, monitoring, alerting, observability, and security-information capabilities.
• Collaborate with architecture and engineering teams to secure cloud networking, storage, Kubernetes environments, containers, and infrastructure-as-code deployments.
• Support identity and access management (IAM), least-privilege access, authentication, authorization, and privileged-access security controls.
• Apply risk-analysis methods and best practices to determine the scope, severity, and treatment of identified cybersecurity risks.

Required Qualifications

• Proficiency in cybersecurity principles and technologies, including firewalls, intrusion detection systems (IDS), and security information and event management (SIEM) platforms.
• Knowledge of RMF, STIGs, ATO and Continuous ATO processes, associated documentation, and risk-scoping best practices.
• Experience with cloud platforms, including AWS and Azure.
• Experience supporting AWS cloud migrations.
• Knowledge of cloud networking, storage, architecture, data controls, monitoring, and logging.
• Experience with cloud observability toolsets.
• Understanding of version-control systems, including Git, and their integration with CI tools such as GitLab CI.
• Experience configuring and integrating cybersecurity tools within CI/CD pipelines.
• Familiarity with Kubernetes environments, container security, and Kubernetes package-management tools such as Helm.
• Basic understanding of Linux administration and programming or scripting languages, including Java, Python, and C#.
• Understanding of infrastructure and configuration as code tools, including Ansible and Terraform.
• Experience with IAM solutions, including Azure Entra ID, AWS IAM, and Keycloak.
• Active Top Secret clearance with SCI eligibility.

Education & Experience Requirements

• Minimum of 10 years with AS/AA; Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD. However, four (4) years of additional experience can be considered in lieu of a Bachelor's degree.

Required Certification

• Active CompTIA Security+ certification - must remain current.

Preferred Certifications

Candidates should possess one or more of the following preferred certifications:

• AWS Certified Security - Specialty
• (ISC) Certified Cloud Security Professional (CCSP)
• CompTIA SecurityX/CASP+
• Certified Information Systems Security Professional (CISSP)
• CISSP-Information Systems Security Engineering Professional (CISSP-ISSEP)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• CISSP-Information Systems Security Architecture Professional (CISSP-ISSAP)
• Microsoft Certified: Azure Fundamentals (AZ-900)

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.