Sr. Cloud Security Engineer (6112) at MetroStar

Washington, District of Columbia, United States -

Full Time

Start Date

Immediate

Expiry Date

14 Jan, 26

Salary

216000.0

Posted On

17 Oct, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cloud Security, AWS, Azure, GCP, DevSecOps, Infrastructure as Code, Terraform, CI/CD, Security Governance, Compliance, IAM, Networking, Encryption, Application Security, NIST 800-53, FedRAMP

Industry

Software Development

Description

We are seeking a Sr. Cloud Security Engineer with security engineering experience building and securing cloud infrastructure at scale across AWS/Azure/GCP and an understanding of development lifecycle phases as part of the DevSecOps methodology. This position will utilize the DevSecOps methodology to successfully secure platform features and capabilities deployed onto Commercial and GovCloud AWS/Azure/GCP environments. We know that you can’t have great technology services without amazing people. At MetroStar, we are obsessed with our people and have led a two-decade legacy of building the best and brightest teams. Because we know our future relies on our deep understanding and relentless focus on our people, we live by our mission: A passion for our people. Value for our customers. If you think you can see yourself delivering our mission and pursuing our goals with us, then check out the job description below! What you’ll do: Cloud Security Architecture & Engineering • Design and implement secure architecture across AWS, Azure, and GCP, including Commercial, GovCloud, and IL6 enclaves. • Define and enforce security baselines (CIS, NIST 800-53, FedRAMP, etc) and align security controls with compliance frameworks. • Lead architecture reviews, threat modeling, and secure design guidance for cloud services and workloads. Automation & DevSecOps • Build and maintain Infrastructure as Code modules (Terraform) to enforce security at scale across hundreds of accounts, subscriptions, and projects. • Integrate CI/CD pipelines with automated security scans (SAST, DAST, IaC scanning, container security) and drive secure coding practices across the organization. • Develop and enhance automated guardrails, policies, and remediation pipelines. Security Governance and Compliance • Support ATO compliance efforts by embedding controls into the cloud buildout process and lead assessments. • Partner with compliance officers, auditors, and platform engineers to ensure evidence and reporting readiness. • Implement centralized logging, monitoring, and incident response across multi- cloud environments. Collaboration & Leadership • Guide a team of security and platform engineers on secure cloud development and automation practices. • Partner with architects, developers, and compliance teams to align security objectives between projects, stakeholders, and platform teams. • Act as a cloud security subject matter expert for stakeholders, architects, and engineering leads. What you’ll need to succeed: Must have an active Top Secret security clearance Bachelor Degree in computer science or relevant technical degree; or equivalent industry experience. 8+ years of cybersecurity or cloud engineering experience, with at least 5+ in cloud security. Hands-on advanced experience securing and automating two or more cloud environments (AWS/GCP/Azure/Oracle). Experience with native cloud security tools (AWS Security Hub, GuardDuty, Defender for Cloud, Google SCC, etc) Strong background in Infrastructure-as-Code (Terraform, CloudFormation, ARM/Bicep) and CI/CD (GitLab, GitHub Actions, etc). Proficient in at least one programming/scripting language (Python, Go, PowerShell, Bash). Deep knowledge of cloud identity and access management (IAM/RBAC), key management (KMS/Key Vault/Cloud KMS), networking, and encryption. Experience with application security standards such as OWASP ASVS/Top 10 and CWE 25. Experience aligning security controls with NIST 800-53, FedRAMP, CIS Benchmarks, or equivalent frameworks. Proven track record embedding security into Agile/DevSecOps teams and pipelines. Strong communication and leadership skills, with demonstrated experience in successfully designing, delivering, and iterating on complex projects with a diverse set of stakeholders. SALARY RANGE: $166,000 - $216,000 The salary range for this position is determined based on qualifications, skills, and relevant experience. The final salary offered will be determined based on several factors including: The candidate's professional background and relevant work experience The specific responsibilities of the role and organizational needs Internal equity and alignment with current team compensation This role is also eligible for additional compensation, subject to the terms and policies of MetroStar, which may include: Performance-based bonuses Company-paid training and/or certifications Referral bonuses To apply for this position, please submit your resume via the form below or through our careers page: https://www.metrostar.com/jobs/ Application Deadline: Applications will be accepted on a rolling basis until the position is filled; candidates are encouraged to apply as early as possible for full consideration. Additional Compensation: This role may also be eligible for bonuses and/or additional incentives based on individual and company performance. Benefits: All full-time employees are eligible to participate in our benefits programs: Health, dental, and vision insurance 401(k) retirement plan with company match Paid time off (PTO) and holidays Parental Leave and dependent care Flexible work arrangements Professional development opportunities Employee assistance and wellness programs Like we said, we are big fans of our people. That’s why we offer a generous benefits package, professional growth, and valuable time to recharge. Learn more about our company culture code and benefits. Plus, check out our accolades. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law. What we want you to know: In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. Not ready to apply now? Sign up to join our newsletter here.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The Sr. Cloud Security Engineer will design and implement secure architecture across multiple cloud environments while leading architecture reviews and threat modeling. This role also involves building Infrastructure as Code modules and integrating CI/CD pipelines with automated security scans.