Cloud Security Engineer

About the role

Engineer cloud security controls and telemetry across AWS GovCloud and connected services—implementing IAM guardrails, encryption/KMS, logging/monitoring, workload protection, and continuous compliance that feed the SOC.

Responsibilities

• Implement IAM governance, encryption/KMS, logging/monitoring (CloudTrail/GuardDuty/Security Hub).
• Automate CSPM guardrails and continuous compliance checks; remediate misconfigurations.
• Integrate cloud telemetry with SIEM/SOAR; collaborate with SOC on cloud threat detections.

Requirements

• 5–8+ years in cloud security; deep IAM, network security, key management, DevSecOps.
• Experience with AWS GovCloud services and telemetry integration at scale.
• Security clearance: Ability to obtain/maintain a Public Trust (or higher per client).
• US Citizenship or Green Card Required, with eligibility to obtain a public trust clearance.

Qualifications

• To Be Successful In This Role: Deep understanding of cloud security principles and practices, experience with AWS GovCloud services, strong technical skills in IAM, encryption, and logging, and a track record of successful security implementations.

Skills

• Cloud security certifications (CCSP, AWS/Azure Security Engineer) preferred.

Benefits

Competitive compensation, comprehensive insurance options, matching contributions through the 401(k) plan and the share purchase plan, paid time off for vacation, holidays, and sick time, paid parental leave, learning opportunities and tuition assistance, wellness and well-being programs.

Pay

Reasonable estimate of the current range for this role in the U.S. is $63,700.00 - $139,300.00.

Schedule

This position is located in our Knoxville, TN office; however, a hybrid working model is acceptable.