Cleared AWS Cloud Security & Guardrails Engineer

ABOUT PRISM
PRISM is devoted to modernization and innovation within the world of technology, security, and IT enterprise solutions. We are recognized for meeting performance requirements and exceeding customer expectations since 1994. Our culture is founded on relationships, opportunity, and success. Offering comprehensive benefit plans including medical, dental, vision, and 401K along with our people - first approach sustains our reputation as a premier employer.

PRISM is seeking an experienced AWS Cloud Security and Guardrails Engineer to shape security architecture and build integration platforms for a mission critical, highly classified modernization initiative. In this role, you will design AWS IAM policies, KMS encryption controls, and centralized logging patterns, conduct cloud architecture and IaC security reviews, support security assessment documentation, and partner with engineering teams to embed reusable guardrails into deployment workflows.

Key Responsibilities

• Architect and refine AWS IAM policies, KMS encryption frameworks, and centralized audit logging patterns.
• Conduct security risk evaluations across cloud architectures and Infrastructure as Code (IaC) templates.
• Compile security assessment artifacts, control documentation, and compliance evidence.
• Collaborate with engineering teams to integrate automated, reusable security guardrails directly into CI/CD deployment pipelines.

Required Qualifications

• 5 plus years of engineering experience, including at least 3 years of hands-on AWS cloud engineering.
• In-depth expertise spanning AWS IAM, KMS encryption, cloud logging architectures, and security baseline controls.
• Proven ability to audit technical implementations against stringent security and regulatory guidelines.
• Demonstrated track record operating and executing within tightly controlled, classified cloud environments.
• Active TS SCI security clearance with eligibility for program-specific read-ons and special access approvals.
• Must reside within local commuting distance of an approved secure facility in Herndon VA, Washington DC, Seattle WA, or Denver CO.
• Ability to work full-time on-site within secure facilities, with occasional travel to customer sites as required.

Desired Qualifications

• Hands-on experience with automated policy validation, static code analysis, or IaC security tooling.
• Direct involvement supporting formal Assessment and Authorization (A&A) or Risk Management Framework (RMF) activities.
• Active AWS Professional or Specialty certifications, or security credentials such as CompTIA Security plus or CISSP.

REQUIRED SECURITY CLEARANCE

• Active TS-SCI Clearance

PRISM is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.