Cloud Security Engineer
No salary listed
Expert
Bachelor's
San Antonio, TX, USA
In PersonFull-time on-site in San Antonio, Texas.
CybersecuritySecurity Engineering & Architecture
No H1B Sponsorship
US Citizenship, US Top Secret Clearance Required
About the job
Requirements
- U.S. citizenship, current TS/SCI clearance, and current CI polygraph are required.
- A bachelor's degree in Cybersecurity, Computer Science, Cloud Computing, Information Technology, or a related technical field is required.
- DoD 8140/8570 IAT Level II certification and an AWS certification are required.
- At least 10 years of relevant experience is required.
- Expert-level AWS knowledge and advanced networking, VPC, peering, and subnet experience are required.
- GitLab CI, Terraform (including custom-module development and collaboration at scale), and Ansible experience are required.
- Linux proficiency and SRE experience for a mid-to-large enterprise system are required.
- Experience designing, implementing, and maintaining AWS cloud architecture and creating or maintaining implementation documentation is required.
- Experience supporting RMF, ATO, cATO, and continuous monitoring is required; SIEM and security automation experience, with familiarity with SOAR/IMS, is required.
- Active TS/SCI clearance is preferred.
- An advanced degree in a related technical field is preferred.
- AWS Certified Security - Specialty, CCSP, CISSP, CKS, or CKA certification is preferred.
- Azure or GCP cloud architecture experience is a plus but not required; Kubernetes and Docker experience are preferred.
- Knowledge of SQL databases and coding skills in Java, Python, Go, or C++ is preferred, as is experience with microservices architectures.
- Security framework experience with RMF, DISA STIG, or CIS Benchmarks, and a software engineering background, are preferred.
- Experience engineering SOAR/IMS and supporting Incident Response Teams, and applying AI/ML to security automation, is preferred.
- Experience supporting software factory environments such as Iron Bank or Big Bang, and IL4/IL5/IL6 cloud environments, is preferred.
Responsibilities
- Lead zero trust engineering and interoperability initiatives, adapting implementations as tools and requirements evolve.
- Design, implement, and maintain AWS cloud architecture using Terraform, including custom modules, and Ansible.
- Administer cloud infrastructure-level consoles such as AWS; secure cloud services and accounts; and apply advanced networking, VPC, peering, and subnet design.
- Support the SIEM, SOAR, Incident Management System, and Incident Response Team roadmap, engineering, and integration.
- Architect logging, monitoring, and telemetry, coordinating delivery with the Cyber Security Service Provider.
- Advance security automation and automated evidence collection to improve inheritance and continuous monitoring maturity.
- Provide subject-matter-expert support and reach-back across DevSecOps automation, supply chain security, enterprise vulnerability management, and AI.
- Update the Cyber Assessment Roadmap; create and maintain documentation; and brief technical and non-technical stakeholders.
- Collaborate with ISSMs, ISSEs, Value Stream engineers, COT, CPT, and Government stakeholders using tools such as Git.
- Support Zero Trust enforcement, cloud security controls, and Infrastructure as Code security across mission environments.
- Maintain and validate A&A control evidence in eMASS, including control implementation, SIAs, SRCs, and POA&Ms, to support continuous monitoring and cATO readiness.
- Architect and integrate an enterprise SIEM that ingests logs from AWS (VPC, EKS, CloudTrail), Okta, Istio, GitLab, and host logs (systemd and audit), with dashboards for runtime monitoring, defense, and forensics.
- Enforce Zero Trust through ICAM integration and micro-segmentation validation, and manage enterprise security tooling.
Desired Qualifications
- Experience with Azure or GCP cloud architecture is a plus but not required.
About the company
AnaVation provides IT engineering services to the U.S. Federal Government, focusing on complex technical and analytical challenges. It works by delivering contract-based projects that cover intelligence collection and processing, analytical systems, big data solutions, and cybersecurity, using cross-disciplinary engineering teams (called AnaVators) to tailor solutions to government needs. The company differentiates itself through a government-focused, cost-effective approach, deep technical expertise, and a values-driven culture that emphasizes building long-term partnerships and strong customer trust. Its goal is to help federal agencies improve operational efficiency, security, and decision-making by solving difficult technical problems and delivering reliable, mission-critical software and systems.
Company Size
51-200
Company Stage
N/A
Total Funding
N/A
Headquarters
Reston, Virginia
Founded
2013
Get referred to AnaVation
See people who can refer or advise you
Simplify's Take
What believers are saying
- AnaVation earned 2026 Best Places to Work, supporting recruiting and retention.
- FBI ITSSS-2 and MDA SHIELD expand addressable task orders through 2034.
- Open 2026 hiring for security and litigation support signals ongoing demand.
What critics are saying
- FBI and MDA vehicles intensify competition from Leidos, Booz Allen, and SAIC.
- Award concentration on federal contracts exposes revenue to protest delays and recompetes.
- Without non-government diversification, AnaVation depends on a few agencies and contracting officers.
What makes AnaVation unique
- AnaVation won FBI ITSSS-2, an eight-year, $8B vehicle in 2024.
- AnaVation joined MDA SHIELD in January 2026, a $151B IDIQ pool.
- CMMC Level 2 positions AnaVation for controlled government cyber work.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Disability Insurance
- 401(k) Retirement Plan
- 401(k) Company Match
- Paid Vacation
- Paid Holidays
- Professional Development Budget
- Life Insurance