Lead AWS Security Engineer

We are seeking a motivated and customer-oriented professional to support our SAMHSA client.

Duties and responsibilities include:

The Lead AWS Security Engineer will join a dynamic team of cloud, security, and compliance experts. This role requires an individual with proven leadership in designing, implementing, and managing secure AWS-based solutions. The successful candidate will take charge of tasks related to Zero Trust Architecture (ZTA), endpoint protection, and CI/CD pipeline security.

• Lead continuous monitoring, implementation, and security operations for AWS cloud solutions, ensuring adherence to industry best practices and NIST compliance.
• Collaborate with cross-functional teams, including security engineers, analysts, and compliance specialists, to develop secure and scalable cloud architectures.
• Architect and implement identity and access management (IAM) solutions, ensuring compliance with NIST standards for authentication and authorization.
• Perform risk assessments, develop and implement strategies to mitigate vulnerabilities, and integrate security controls into AWS solutions.
• Select and configure AWS services and tools in alignment with NIST compliance guidelines.
• Stay current with AWS updates, NIST regulatory changes, and industry trends, advising teams on potential impacts and necessary compliance adjustments.
• Define and document system requirements and design specifications in collaboration with stakeholders to meet NIST compliance needs.
• Provide technical leadership and mentorship to project teams, maintaining compliance and security standards throughout the development lifecycle.

Required Qualifications:

• Minimum of 5 years of cloud security engineering experience within an AWS environment.
• Technical Expertise: In-depth knowledge of AWS cloud services and infrastructure, with hands-on experience in securing and managing cloud-based solutions.
• NIST Compliance: Experience with NIST compliance, including familiarity with relevant frameworks, controls, and security protocols.
• IAM Knowledge: Strong understanding of IAM principles and tools (e.g., Active Directory, OAuth, PKI, SAML).
• Cloud Security: Demonstrated expertise in cloud security practices, including encryption, data protection, ZTA, network security, and vulnerability management.
• Risk Management: Proficiency in conducting risk assessments and devising risk mitigation strategies for AWS environments.
• Communication Skills: Excellent verbal and written communication skills for effective collaboration with both technical and non-technical stakeholders.
• Certifications: Relevant certifications such as AWS Certified Cloud Practitioner, AWS Certified Solutions Architect, CISSP, or equivalent.
• Hands-on Experience: Familiarity with one or more of the following is preferred:
  • Okta
  • CrowdStrike
  • Splunk (SIEM)
  • Tenable Security Center/Nessus
  • Ansible/Powershell
  • Web Application Firewalls (WAFs)
• Proven experience in providing technical solutions to address vulnerabilities and security gaps during the system development process.
• Ability to analyze complex environments and develop appropriate security technology deployment strategies.
• Readiness to respond effectively to security incidents.
• AWS Certified Cloud Practitioner
• AWS Certified Solutions Architect - Professional or equivalent

Desired Qualifications:

• AWS DevSecOps Engineer, AWS Solutions Architect Associate, AWS Security Specialty, or equivalent certification(s)

Education Requirement: Bachelor's degree in cybersecurity or related field required. Master's degree in cybersecurity or related field preferred.

Clearance Requirement: Ability to obtain and maintain a Public Trust.

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - $2,500/year!

Why Join Gunnison?

• Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.
• Quality is our top priority.
• Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.
• There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.
• We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.
• We hire for careers at Gunnison, not to fill a position.

Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.

In 1994 Gunnison Consulting Group began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects. By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could, the company has thrived for over 25 years.