Cloud Security Engineer (AWS) - TS/SCI - On-Site SCIF with Security Clearance
Quick overview
Job description
IMPORTANT: This position is 100% ON-SITE inside a SCIF. This is NOT remote work and NOT hybrid. On-site work is required and is not optional. This role is CUSTOMER-FACING, working directly with government and partner stakeholders, including at customer facilities as needed.
Employer: D9Tech Resources, LLC
Openings: Multiple openings
Location: Herndon, VA (primary) or Washington, DC (preferred).
Alternates: Seattle, WA or Denver, CO. Must live within commuting distance of one of these SCIF locations.
Employment type: W-2 Contract, Full Time
Hours: 40 hours per week (full time)
Period of performance: December 2026 through November 2027
Clearance: Active TS/SCI required
Pay: Competitive Summary
D9Tech Resources, LLC is hiring in support of a national security cloud program. Secure and help authorize classified AWS environments. You will engineer IAM, KMS and logging guardrails, run security tooling, drive RMF/ATO work and close POA&M findings across mission projects. All work is performed on-site in a SCIF. Responsibilities
- Design IAM, KMS and logging guardrails for classified workloads
- Administer and secure artifact repository services (Sonatype Nexus Repository)
- Build and tune OpenSearch Dashboards as a SIEM and logging platform
- Remediate POA&M items, including MFA implementation
- Support NIST 800-53/RMF controls, STIG compliance and POA&M tracking
- Produce and maintain ATO packages and documentation
- Perform architecture and code reviews, vulnerability assessments and incident response support Required Qualifications
- Active TS/SCI clearance, eligible for SCI read-on/INDOC and SAP indoctrination where required
- Live within commuting distance of a SCIF in Herndon, VA, Washington, DC, Seattle, WA or Denver, CO
- Able and willing to work on-site in a SCIF on a regular basis, including at customer facilities
- 5+ years in cybersecurity or security engineering, including 3+ years securing AWS environments
- RMF/ATO experience in DoD or IC environments
- Hands-on experience with AWS cloud services
- Experience in air-gapped or classified environments with no public internet access and controlled change management (CCB)
- DoD 8140/8570 IAT Level II or higher certification (e.g., Security+, CISSP) where applicable
Preferred Qualifications
- Experience in AWS GovCloud and/or classified AWS regions (C2S/SC2S)
- AWS Certified Solutions Architect, DevOps Engineer, Advanced Networking or Security Specialty
- Nexus Repository and OpenSearch experience
- CISSP Reminder: On-site in a SCIF, customer-facing. Remote and hybrid candidates will not be considered. D9Tech Resources, LLC is an
Equal Opportunity Employer.
Similar jobs
- BA

Infrastructure Cloud EngineerRecently posted
Booz Allen Hamilton · Chantilly, VA · On-site 🇺🇸
AWSAnsibleArgoCD+10Technology$86.8k - $198k/yr - OR

Principal Core Infrastructure Engineer, OCI Planning & CapacityRecently posted
Oracle Corporation · Nashville, TN · Remote 🇺🇸
MicroservicesOracleAWS+10Technology$114.6k - $234.6k/yr - OR

Principal / Master Principal Cloud Architect- Oracle Government, Defense & Intelligence
Oracle Corporation · Reston, VA · On-site 🇺🇸
MicroservicesOracleShell+9Technology$118.7k - $194.4k/yr - HB

AWS DevSecOps / Cloud Security EngineerRecently posted
High Bridge Consulting · United States · Hybrid 🇺🇸
AWSTerraformIAMTechnologySalary not listed - ID
Senior Cloud & Hybrid Network Engineer - JobID-0265 with Security ClearanceRecently posted
Innovative Defense Technologies · Arlington, VA · Hybrid 🇺🇸
MicroservicesService MeshAnsible+8Technology$135k - $231k/yr - ST

Senior Cloud Software EngineerRecently posted Auto Apply
STR · Dayton · Hybrid 🇺🇸
DockerMicrosoft OfficeGit+20TechnologySalary not listed - ST

Senior Cloud Software EngineerRecently posted Auto Apply
STR · Arlington · Hybrid 🇺🇸
DockerMicrosoft OfficeGit+20TechnologySalary not listed - ST

Senior Cloud Software EngineerRecently posted Auto Apply
STR · Woburn · Hybrid 🇺🇸
DockerMicrosoft OfficeGit+20TechnologySalary not listed - TA

Staff Mission Cloud Engineer Auto Apply
True Anomaly · Denver · Hybrid 🇺🇸
AWSDNSZero Trust+3Technology$205k - $295k/yr - TR

Cloud / Transformation Auto Apply
Trace3 · United States · Hybrid 🇺🇸
RecruitingSalary not listed - SP

Sr. IT Wireless Network EngineerRecently posted Auto Apply
SpaceX · Memphis · Hybrid 🇺🇸
LinuxNetwork AdministrationTechnologySalary not listed - VI
Cloud Engineer Co-opRecently posted Auto Apply
Vestmark Internship Program · Wakefield · Hybrid 🇺🇸
SQLSpringAWS+6TechnologySalary not listed