Lead AWS Cloud Security Remediation Engineer Local to VA

In person interviews are being held this week: Thurs 7/30 and Fri 7/31 in Reston, VA

 

C2C rate: $90

 

Lead AWS Cloud Security Remediation Engineer (AWS Platform / CSPM Remediation)

15+ Year exp 

Only USC, H4EAD, TN 

Location: Remote with onsite interview in Reston, VA
Type: Contract | Schedule: 40 hours/week

Overview
We’re looking for a senior, hands-on AWS platform engineer to help remediate cloud security misconfigurations and attack indicators surfaced by a CSPM tool (CrowdStrike). This role is deeply technical and focused on building, hardening, troubleshooting, and improving AWS environments that support production workloads and ongoing migration efforts (on?prem to AWS/EKS).
“Lead” refers to senior depth/experience—this is not people management.

Work setup / interview

• Contract: 6 months (with potential extension based on project need)
• Location: Client is in Reston, VA. Onsite interview required, role is remote.

What you’ll do

• Remediate AWS security vulnerabilities/misconfigurations across:
• IAM, networking exposure, encryption/logging, patching, config drift, and container/EKS security
• Translate CSPM findings into actionable remediation plans and durable fixes
• Provision and harden AWS resources; implement repeatable guardrails and automation to prevent recurrence
• Troubleshoot production issues end-to-end with app teams and platform/security stakeholders
• Perform root-cause analysis (RCA) using logs/telemetry and implement corrective actions
• Support cloud migration/modernization efforts (on?prem workloads moving into AWS/EKS; migration is well underway)

Required qualifications (must-have)

• 10+ years overall IT experience (senior/lead level)
• 5+ years hands-on AWS platform engineering (AWS experience must be within the most recent 5 years)
• Strong production support and troubleshooting experience (not “pipeline-only DevOps”)
• Proven ability to perform RCA and partner with application teams to isolate issues (knowing where/what to check in logs)
• Terraform (at least 1+ year hands-on)
• Strong AWS fundamentals, including:
• EC2, IAM, Security Groups, S3, VPC/networking concepts
• Networking troubleshooting skills (identify bottlenecks from a platform engineering standpoint)
• Linux administration (hands-on)
• At least one AWS certification (Security / Solutions Architect / SysOps / DevOps preferred)

Nice-to-haves / preferred

• EKS / Kubernetes (some openings are EKS-heavy)
• Python automation (Lambda/Boto3 helpful for remediation workflows)
• CloudFormation and/or CDK
• AWS security services experience (in a remediation context): Security Hub, GuardDuty, Inspector, Config, CloudTrail/CloudWatch, KMS, Secrets Manager, WAF
• SRE / production engineering background (incident response, resiliency, operational readiness)
• Database experience
• Exposure to AI workloads (for some openings)