AWS Security Engineer

Peraton is a next-generation national security company that drives missions of consequence spanning the globe. They are seeking an experienced AWS Security Engineer to support secure development, modernization, and migration in a government multi-cloud environment, focusing on incident response, troubleshooting, and AWS infrastructure management.

Responsibilities:

• Harden AWS environments and remediate STIG findings in accordance with NIST SP 800-53 and DHS 4300A requirements
• Maintain and improve the golden image pipeline to ensure compliant baselines
• Serve as an escalation point from Tier 2 support for complex incidents and outages within the AWS GovCloud environment
• Investigate and resolve issues across various AWS services EC2, RDS, S3, VPC, Lambda, and IAM
• Perform root cause analysis to address underlying infrastructure issues and provide solutions to prevent recurrence
• Manage and resolve high-priority incidents, ensuring timely communication with stakeholders and affected tenants
• Continuously monitor tenant environments using CloudWatch, CloudTrail, and other tools (Dynatrace, Splunk) to detect performance issues, security incidents, and infrastructure bottlenecks
• Utilize Dynatrace, Splunk, or other proactive monitoring tools to mitigate potential issues before they escalate
• Analyze system performance and recommend optimizations to improve stability, efficiency, and security
• Manage and maintain the AWS infrastructure, including EC2 instances, S3 buckets, VPC configurations, RDS databases, and other services
• Ensure that all tenants’ AWS resources are secure, FedRAMP compliant, and optimized for performance
• Collaborate with the Architecture team to implement solutions that align with best practices for AWS cloud infrastructure
• Adhere to Change Management procedures
• Collaborate with other team engineers to resolve development issues/incidents and implement improvements
• Document solution designs, process procedures, and lessons learned to enhance team knowledge
• Provide technical mentorship and knowledge sharing to more junior engineers less familiar with pipeline and infrastructure automation

Requirements:

• Bachelor's degree and 5 years of experience, an Associates degree and 7 years of experience, or a High School diploma or equivalent and 9 years of experience
• U.S. Citizenship required
• Must have ability to obtain a DHS Public Trust Security Clearance, and/or EOD clearance
• 5+ years of experience in cloud services and infrastructure
• 3+ years of extensive hands-on experience with automation involving a wide range of AWS services including but not limited to EC2 instances, S3 buckets, VPC configurations, RDS databases, and other services
• Proven experience in systems engineering, design, and integration and system administration in Linux or RHEL environments
• Strong understanding of system life-cycle processes including requirements development, design, implementation, testing, and sustainment
• Hands-on experience working with cloud platforms (AWS, Azure, or similar)
• Hands-on experience with system verification, validation, and compliance documentation
• Familiarity with tools and methodologies supporting systems architecture and model-based systems engineering (MBSE)
• Strong analytical, problem-solving, and communication skills
• Ability to work effectively in cross-functional teams and manage competing priorities in a fast-paced environment
• Preferred certifications: AWS Cloud Practitioner
• AWS Certified SysOps Developer, Associate
• AWS Certified Developer, Associate
• AWS Certified DevOps Engineer, Professional
• Relevant Agile Certifications
• Red Hat Ansible
• Experience supporting government or defense contracts
• Extensive knowledge and understanding of AWS GovCloud and deploying in government environments
• Experience with incident management, root cause analysis, and resolving high-priority incidents in large, multi-tenant environments
• Exemplary communication analytical, and technical knowledge across the client environment
• Knowledge of ITIL frameworks or systems engineering certifications (INCOSE, CSEP, or equivalent)
• Familiarity with cloud-based or hybrid systems integration
• Experience in Agile or DevSecOps environments
• Experience with PowerShell, AWS CLI, or other automation scripts to troubleshoot and resolve issues