Overview
In this role you will advance cloud security for the USAF Cloud One Architecture, focusing on secure AWS SIPRNet environments. You will collaborate with cross-functional teams to implement and sustain authorization, risk management, and compliance workflows. You will drive automated vulnerability scanning, reporting, and remediation to support ATO readiness and system resiliency. The position offers impact at a global scale within a mission-driven context and exposure to cutting-edge security tooling. You will work closely with stakeholders to shape secure, cost-efficient cloud operations.
Responsibilities
- Design, deploy, and maintain ATO-ready configurations for AWS SIPRNet within the C1 Architecture
- Serve as SME for system design, builds, and ATO efforts across cybersecurity requirements and tooling
- Operate and maintain compliance tools (ACAS/Nessus, AWS Inspector, AWS Security Hub) and detect misconfigurations and threats
- Monitor logging and event tools (CloudTrail, AWS Config, GuardDuty) and other cloud-native services
- Document mitigations, compile scan exports, and generate vulnerability reports with POA&M
- Continuously monitor resources via automated scans and reporting feeds for cybersecurity authorization
- Ensure compliance with SCCA, Cloud Computing SRG, and STIG/SRG requirements
- Create RMF-required documentation and support ATO sustainment, verify patching, and remediation
- Plan and execute enterprise vulnerability and compliance scanning; coordinate STIG checklists
- Prepare technical briefs and collaborate with teammates; mentor junior staff
Key requirements
- Bachelor with 8+ years of relevant experience or Master with 6+ years
- 6+ years of experience with cloud-hosted systems
- U.S. citizenship and active DoD Secret clearance
- DoD 8570/8140 IAT Level II baseline certification
- AWS Certified Security β Specialty
- ACAS Certified β Supervisor/Operator
- Hands-on with AWS CLI, Ansible Playbooks, Tenable Nessus
- Experience implementing/remediating DISA STIGs
- team mentorship
- stakeholder communication
- collaboration
- AWS CLI
- Ansible Playbooks
- Tenable Nessus
Senior AWS Cyber Engineer in Bedford employer: Leidos
Leidos is an exceptional employer, offering a collaborative culture that prioritises employee growth and work-life balance. With a strong commitment to diversity and inclusion, employees are empowered to develop their skills through technical academies and career development plans, all while contributing to meaningful projects that enhance public sector services in London. The comprehensive benefits package, including a contributory pension scheme and flexible working options, further underscores Leidos' dedication to attracting and retaining top talent.