Cleared AWS Cloud Security & Guardrails Engineer (Washington, DC)
Summary
AWS Cloud Security & Guardrails Engineer at Virtual Service Operations designs IAM policies, KMS encryption controls, and centralized logging for a mission-critical, security-sensitive (cleared) initiative in Washington, DC. Day to day: review architectures and infrastructure code for security risks and embed reusable guardrails with engineering teams.
Are you ready to put your AWS expertise to work on cloud challenges that few engineers get the chance to tackle?
Virtual Service Operations (VSO) is seeking an experienced AWS Cloud Security & Guardrails Engineer to join a highly skilled team delivering advanced cloud engineering capabilities for a mission-critical, security-sensitive initiative. Help shape the security architecture of sophisticated AWS platforms from the ground up. You will translate security requirements into practical identity, encryption, and observability guardrails that engineering teams can build on with confidence. You will work with experienced technical partners in a collaborative environment where careful engineering and measurable results matter.
Key Responsibilities:
- Design and improve AWS IAM policies, encryption controls, and centralized logging patterns.
- Review cloud architectures and infrastructure code for security risks.
- Support security assessment documentation and evidence collection.
- Partner with engineering teams to embed reusable security guardrails in deployment workflows.
Qualifications:
- 5+ years in engineering, including 3+ years of hands-on AWS experience.
- Strong AWS IAM, KMS, logging, and cloud security architecture knowledge.
- Experience reviewing technical implementations against security requirements.
- Hands-on AWS cloud experience and ability to work effectively in highly controlled environments.
Preferred Qualifications:
- Experience with automated policy validation or infrastructure-as-code security.
- Experience supporting formal security authorization activities.
- Relevant AWS professional or specialty certifications; Security+ or CISSP where applicable.
