Cloud Security Specialist IV

Location: Remote

GAMA-1 is seeking a remote Cloud Security Specialist IV focused on AWS security operations, IAM, incident response, vulnerability management, and compliance in regulated environments. In partnership with the ISSO, this role is responsible for the overall protection of the enterprise cloud environment, ensuring data security and regulatory compliance while implementing best practices for access control, encryption, and threat mitigation.

The Cloud Security Specialist IV collaborates with engineering and operations teams to secure systems, support audits and compliance efforts, and drive effective security across AWS environments.

What You Will Do in This Role

The Cloud Security Specialist IV is responsible for leading AWS security operations, managing enterprise security controls and IAM, driving incident response and compliance, and serving as the SME and customer point of contact to ensure secure, resilient, and well-governed cloud environments.

 
Responsibilities include:

• Serve as the Cloud Security SME and primary customer point of contact
• Operate and monitor security controls across enterprise IT systems to support security operations
• Lead cloud security operations in AWS (e.g., WAF, GuardDuty, Macie, CloudTrail, CloudWatch, Control Tower), ensuring effective detection, response, and governance
• Perform security monitoring, incident response, and digital forensics using SIEM tools
• Direct and influence multi-disciplinary teams in the implementation and operation of cybersecurity controls across the enterprise
• Collaborate with application developers and database administrators to deliver innovative solutions to complex technology challenges and business requirements
• Provide subject matter expertise on information security architecture and systems engineering to IT and business stakeholders
• Drive automation of security controls, data, and processes to enhance metrics, visibility, and operational efficiency
• Implement and manage IAM solutions (ForgeRock, SailPoint, SSO, provisioning, lifecycle management) to ensure secure and effective access governance
• Assess risks and vulnerabilities and implement appropriate mitigation strategies
• Support audits, compliance activities, and execution of the security roadmap to ensure regulatory alignment and continuous improvement

What You Will Bring

Required Qualifications

• 8+ years of experience securing enterprise or mission-critical systems in regulated or government environments
• 5+ years of hands-on security operations experience, including monitoring, detection, and response
• 4+ years of AWS cloud security experience in production environments
• 4+ years of Windows and Linux security administration in enterprise environments
• Experience developing and enhancing security compliance reporting (e.g., AWS Security Hub, CloudTrail)
• Demonstrated experience identifying, mitigating, and managing vulnerabilities
• Experience supporting incident response activities and working with SIEM platforms

Preferred Qualifications

• Experience with IAM integrations (Active Directory, LDAP, enterprise databases), SSO, and identity lifecycle management
• Working knowledge of federal security frameworks and standards, including NIST 800-37/53, IRS 1075, and MARS-E
• Experience with vulnerability management, penetration testing, and enterprise firewall administration
• Scripting experience in Java, JavaScript, or shell scripting

Work authorization/security clearance requirements

• Ability to obtain a security clearance.

Work Environment

• This work is normally completed in a remote environment.

Physical Demands

• Prolonged periods of sitting at a desk and working on a computer.
• Must be able to access and navigate each department at the organization's and client facilities.

Travel Required

• No

Proficiency Requirement

• The employee is expected to demonstrate proficiency in all essential job functions, tools, and processes related to this position within the first 90 days of employment. This includes acquiring a thorough understanding of job-specific responsibilities, systems, and workflows as outlined during onboarding and training. Failure to meet this requirement may result in additional training, reassessment, or other actions as deemed necessary by management.

GAMA-1 also offers a variety of benefits, including health insurance coverage, life and disability insurance, 401(k) savings plan, training and career development opportunities, paid holidays and paid time off (PTO - to cover vacation, illness or disability, appointments, emergencies or other situations that require time off from work). For more information click here.

ABOUT GAMA-1

GAMA-1 is a rapidly growing technology business that is based in Greenbelt, Maryland. GAMA-1 Technologies provides strategic information assurance, information security, and business enterprise and networking solutions to the Federal Government. Our success is based on the utilization of industry and agency standards, establishment of standardized processes, and IT Services expertise. At GAMA-1, we believe employees should grow, achieve, and develop just as the company grows, achieves, and develops. GAMA-1 is committed to providing our employees with opportunities for career advancement throughout their employment. For more information, visit www.gama1tech.com

GAMA-1 is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to: veteran status, uniformed servicemember status, race, color, religion, sex, sexual orientation, gender identity, age, pregnancy (including childbirth, lactation and related medical conditions), national origin or ancestry, citizenship or immigration status, physical or mental disability, genetic information (including testing and characteristics), domestic violence victims, political orientation, status as a smoker or tobacco user, hairstyle, use of a service animal, education status, familial status, HIV/AIDS status, height, weight, reproductive healthcare decisions or any other category protected by federal, state or local law.