Cloud Security Engineer
Description of Task to be Performed:
AnaVation is seeking a Cloud Security Engineer to support one of our cybersecurity programs in our San Antonio office. In this position, the right candidate will lead zero trust engineering, interoperability, and modern security capability development across the Government enterprise. The Cloud Security Engineer will manage security systems and tools for cloud technologies, investigate and enhance existing cloud structures, and drives issue identification/resolution, integration, gap assessment, and continuous improvement, while providing flexible reach-back across the Government’s Cyber Assessment Roadmap.
Position Responsibilities: This position sets the engineering direction for the Government’s zero trust and cloud security modernization, translating roadmap objectives into deployed, measurable capability.
Responsibilities include:
- Lead zero trust engineering and interoperability initiatives, future-proofing implementations as tools and requirements evolve.
- Design, implement, and maintain AWS cloud architecture using Terraform (including custom modules) and Ansible.
- Administer relevant cloud infrastructure-level consoles (e.g., AWS) and secure cloud services and accounts; apply advanced networking, VPC, peering, and subnet design.
- Support the SIEM, SOAR, Incident Management System (IMS), and Incident Response Team (IRT) roadmap, engineering, and integration.
- Architect logging, monitoring, and telemetry, coordinating delivery with the Cyber Security Service Provider (CSSP).
- Advance security automation and automated evidence collection to increase inheritance and continuous monitoring maturity.
- Provide flexible SME support and reach-back across DevSecOps automation, supply chain security, enterprise vulnerability management, and AI.
- Provide updates to the Cyber Assessment Roadmap; create/maintain documentation and brief technical and non-technical stakeholders.
- Collaborate with ISSMs, ISSEs, Value Stream engineers, COT, CPT, and Government stakeholders using tools like git.
- Support Zero Trust enforcement, cloud security controls, and Infrastructure as Code security across mission environments.
- Maintain and validate A&A control evidence in eMASS (control implementation, SIAs, SRCs, POA&Ms) supporting continuous monitoring and cATO readiness.
- Architect and integrate an enterprise SIEM ingesting logs from AWS (VPC, EKS, CloudTrail), Okta, Istio, GitLab, and host logs (systemd, audit), with dashboards for runtime monitoring, defense, and forensics.
- Enforce Zero Trust through ICAM integration and micro-segmentation validation and manage enterprise security tooling.
Required Qualifications:
- Clearance: U.S. Citizen, current TS/SCI; current CI Polygraph
- Education: Bachelor's degree in Cybersecurity, Computer Science, Cloud Computing, IT, or related technical field.
- Certification: DoD 8140/8570 IAT Level II and an AWS certification.
- Location: Full-time on-site in San Antonio, TX.
- Experience and knowledge:
- Subject Matter Expert: provides technical and management leadership on major tasks; domain and expert technical knowledge; decisions may have critical project impact; may lead others.
- Highly experienced with AWS; advanced networking, VPC, peering, and subnet experience.
- GitLab CI experience; Terraform experience including writing custom modules and collaboration at scale; Ansible experience.
- Proficient in Linux; SRE experience for a mid-to-large enterprise system.
- Designing, implementing, and maintaining AWS cloud architecture; creating/maintaining implementation documentation.
- Experience supporting RMF, ATO, cATO, and continuous monitoring; SIEM and security automation (familiarity with SOAR/IMS).
- Minimum years of experience - 10 years of relevant experience.
Preferred Qualifications:
- Clearance: Active TS/SCI
- Education: Advanced degree in a related technical field.
- Certification: AWS Certified Security - Specialty, CCSP, CISSP, CKS, or CKA.
- Experience and Knowledge:
- General cloud architecture experience with Azure or GCP (a plus, not required); experience with Kubernetes and Docker.
- Knowledge of SQL databases and coding skills (Java, Python, Go, C++); microservices architectures.
- Security framework experience (RMF, DISA STIG, CIS Benchmarks); software engineering background.
- Experience engineering SOAR/IMS and supporting Incident Response Teams (IRT); applying AI/ML to security automation.
- Experience supporting software factory environments (Iron Bank, Big Bang); IL4/IL5/IL6 cloud environments.
- Generous cost sharing for medical insurance for the employee and dependents
- 100% company paid dental insurance for employees and dependents
- 100% company paid long-term and short-term disability insurance
- 100% company paid vision insurance for employees and dependents
- 401k plan with generous match and 100% immediate vesting
- Competitive Pay
- Generous paid leave and holiday package
- Tuition and training reimbursement
- Life and AD&D Insurance
Skills
As published by lever · 21 questions · 9 written answers
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, GitHub URL, Other website
Pick from a list (12)
- Are you Legally Authorized to Work in the United States? In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire optional
- PLEASE READ CAREFULLY AND INITIAL EACH PARAGRAPH BEFORE SIGNING I have disclosed all information that is relevant and should be considered applicable to my candidacy for employment. optional
- I understand, where permissible under applicable state and local law, I may be subject to a pre-employment drug screen and background check after receiving a conditional offer of employment to investigate my criminal background [, driving record][, credit history] and other matters related to my suitability for employment. optional
- I hereby certify that the information given by me is true in all respects. I authorize AnaVation, LLC and its representatives to contact my prior employers and all others (with the exception of my current employer, only if I have marked “May we contact?” of this application as “No”) for the purpose of verification of the information I have supplied and release same from any liability resulting from the information released. I authorize employers, schools and other persons named on this application to provide any information or transcripts requested. optional
- I understand employment with AnaVation, LLC is also contingent on my providing sufficient documentation necessary to establish my identity and eligibility to work in the United States. optional
- I hereby certify that, if employed, my employment with AnaVation, LLC will not conflict with, or result in the violation of, breach of, or default under, any contract, agreement or understanding that I am a party to or am bound by, other than those I have disclosed in this application, if any. optional
- I hereby certify that, if employed, my employment with AnaVation, LLC will not violate any non-solicitation, non-competition or other similar covenant or agreement I have with any of my prior employers, other than those I have disclosed in this application, if any. optional
- I hereby certify that, if employed, I will report to my supervisor, a representative of HR or other member of management, if I am ever harassed or discriminated against by someone in the company or if I ever become aware of any unethical behavior by any employee. optional
- I expressly understand and agree that, if employed, my employment, having no specified term, is based upon mutual consent and may be terminated at will, with or without cause, by either party (AnaVation, LLC or me) without prior notice to the other, unless otherwise prohibited by law. Additionally, I understand that no representation, whether oral or written, by any representative or agent of AnaVation, LLC, at any time, can constitute an implied or express contract of employment. I further understand no representative or agent of AnaVation, LLC has the authority to enter into an agreement for employment for any specified period of time or to make any change in any policy, procedure, benefit or other terms or condition of employment other than in a document signed by the Chief Executive Officer or an authorized representative. optional
- I certify that all of the above information is true and complete, and I understand that any falsification or omission of information may disqualify you from further consideration for employment or, if hired, may result in termination regardless of the time elapsed before discovery. Note: An offer of employment is conditioned upon complying with AnaVation, LLC's requirements including, but not limited to, signing a consent to conduct a background investigation. MY SIGNATURE IS EVIDENCE THAT I HAVE READ AND AGREE WITH THE ABOVE STATEMENTS._ Applicant's signature (selecting yes below is equivalent to a handwritten signature) optional
- Do you hold a US Government Top Secret Clearance or Above?
- Are you able to work full-time on-site in San Antonio, TX and reside within commuting distance by your start date?
Written answers (9)
- Home address
- Have you ever been granted security clearance by a U.S. Federal Government Agency? If yes, please state the level of clearance and Granting Agency Name.
- What is your expected salary range?
- EDUCATION: Please provided School Name, Dates Attended, Major, Degree Earned for all schools attended.
- EMPLOYMENT RECORD: List all employment experience, starting with the most recent or present employer, including US Military Service, and working back for the past three employers. Using a separate section for each position, describe in detail all work experience including periods of unemployment. Resumes may not be substituted in lieu of completing the following employment information. Please include Employer Name, Position Held, Dates of Employment.
- EMPLOYMENT RECORD: List all employment experience, starting with the most recent or present employer, including US Military Service, and working back for the past three employers. Please include Employer Name, Position Held, Dates of Employment. optional
- EMPLOYMENT RECORD: List all employment experience, starting with the most recent or present employer, including US Military Service, and working back for the past three employers. Please include Employer Name, Position Held, Dates of Employment. optional
- PROFESSIONAL REFERENCES: List three professional references (other than those listed as current/former supervisor) that we may contact: Please provide Name, Relationship, Phone Number and email.