Cloud Security Compliance Engineer
Cloud Security Compliance Engineer
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Hoplite Solution is seeking a highly skilledCloud Security Compliance Engineerwith hands-on experience obtaining Authority to Operate (ATO) for AWS cloud-based workloads. The ideal candidate will be well-versed in federal compliance frameworks such as NIST RMF and NIST SP 800-53 and capable of automating compliance processes within AWS environments. You will play a key role in authoring security documentation integrating security tools and supporting the automation of governance activities across complex cloud architectures.
Key Responsibilities:
Lead or support efforts to obtain and maintain ATOs for AWS-based systems.
Implement and manage compliance automation tools and AWS governance services such as AWS Config.
Develop and maintain Body of Evidence (BoE) documentation including:
Security control implementation statements
System Security Plans (SSPs)
Test plans and procedures
Architecture diagrams
Integrate AWS monitoring and auditing services (e.g. CloudWatch CloudTrail) into GRC platforms.
Build and configure STIG-compliant AWS resources including hardened Amazon Machine Images (AMIs).
Automate security-related processes using scripting languages (e.g. Python).
Collaborate with engineering DevOps and security teams to ensure systems meet federal and organizational compliance requirements.
Required Qualifications:
Proven experience obtaining ATO for AWS cloud-based systems.
Active PolyStrong knowledge of federal security frameworks such as:
NIST Risk Management Framework (RMF)
NIST SP 800-53
Experience with AWS-native compliance/governance services (e.g. AWS Config AWS Organizations).
Demonstrated experience authoring ATO-related documentation.
Proficiency in integrating AWS log data (CloudTrail CloudWatch) into GRC tools.
Experience automating security tasks using Python.
Desired Qualifications:
Familiarity with customer-specific security practices (e.g. STE STN).
Experience with STIG implementation and building hardened cloud images.
Relevant certifications such as:
AWS Certified Security Specialty
CISSP CAP or similar
Experience working in federal or highly regulated environments.
Required Experience:
Senior IC
Employment Type
Full-Time
