Cleared AWS Cloud Security & Guardrails Engineer

Are you ready to put your AWS expertise to work on cloud challenges that few engineers get the chance to tackle?

Virtual Service Operations (VSO) is seeking an experienced AWS Cloud Security & Guardrails Engineer to join a highly skilled team delivering advanced cloud engineering capabilities for a mission-critical, security-sensitive initiative. Help shape the security architecture of sophisticated AWS platforms from the ground up. You will translate security requirements into practical identity, encryption, and observability guardrails that engineering teams can build on with confidence. You will work with experienced technical partners in a collaborative environment where careful engineering and measurable results matter.

The program you will be supporting is a highly classified, mission-critical modernization initiative. Your roles will be to help build next-generation cloud infrastructure and integration platforms that connect fragmented intelligence, operational data, and mission systems through APIs, MCP servers, and cloud-native technologies.

Key Responsibilities:

• Design and improve AWS IAM policies, encryption controls, and centralized logging patterns.
• Review cloud architectures and infrastructure code for security risks.
• Support security assessment documentation and evidence collection.
• Partner with engineering teams to embed reusable security guardrails in deployment workflows.

Qualifications:

• 5+ years in engineering, including 3+ years of hands-on AWS experience.
• Strong AWS IAM, KMS, logging, and cloud security architecture knowledge.
• Experience reviewing technical implementations against security requirements.
• Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.

Preferred Qualifications:

• Experience with automated policy validation or infrastructure-as-code security.
• Experience supporting formal security authorization activities.
• Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.