AWS Cloud Security Consultant (Identity & Governance)

DescriptionAre you looking to take the next step in your career as an AWS Cloud Security Consultant? Let's chat and see if we are a good match!Opportunity:Virtual Service Operations is searching for an AWS Cloud Security Consultant to join our team. In this role, you'll help federal and defense customers control who can do what across their AWS environments, and prove it to auditors. The work spans identity architecture, multi-account governance, data protection, and the ATO/RMF packages that get systems authorized. Responsibilities: Design and implement IAM across multi-account AWS environments: IAM Identity Center, least-privilege permission sets, roles, and cross-account accessBuild governance guardrails with AWS Organizations, Control Tower, Landing Zone Accelerator, and Service Control PoliciesImplement data protection controls: KMS key strategy, encryption at rest and in transit, Macie for sensitive data discovery, and classification aligned to customer policyStand up continuous compliance monitoring with AWS Config, Security Hub, Audit Manager, and CloudTrail, including automated audit evidenceLead or support ATO packages under RMF (NIST 800-53), FedRAMP, DoD CC SRG, or JSIG, from control mapping through SSP and POA&MRun Well-Architected Security Pillar reviews and security assessments, then turn findings into prioritized remediation plansIntegrate AWS identity with enterprise identity providers (Active Directory, Entra ID, Okta, CAC/PIV) Required Qualifications: AWS Certified Security – Specialty, CISSP, CCSP, or an equivalent GPS-approved certificationProficient with AWS security services, especially IAM Identity Center, Organizations, Control Tower or LZA, KMS, and ConfigUnderstanding of security frameworks (NIST, ISO, CIS), with at least one ATO supported end to end under RMFDoD 8140-compliant baseline certification (e.g., Security+, CISSP)Willing to complete annual AESP training Preferred Qualifications:CISM or CISAJJSIG / ICD 503 or Special Access Program experienceGuardrails as code with Terraform, CloudFormation, or CDKAWS GovCloud (US) or classified region experienceDoD Zero Trust architecture experience No security clearance is required to start; an active Secret, Top Secret, or TS/SCI clearance is preferredRequirementsB.S. in Computer Science, Information Security, or a related field, or equivalent professional experience (3+ years in security)2+ years working with AWS cloud platforms This is a remote positionPlease note that this specific position requires U.S. citizenship statusWhat is Important to Us:You are an excellent communicator in writing and <speaking.You> have the ability to work independently but also value teamwork.Your problem-solving skills are <excellent.You> are looking for a job where performance appraisals occur regularly, and you look forward to advancing your <career.You> seek a community of virtue-centered co-workers and clients.What we offer you: As part of the VSO company, you will be part of a virtue-centered team who value their work and teammates. This is a no-jerk zone. We provide ongoing learning and development opportunities to foster continuous growth. We offer competitive salaries, health benefits, and flexible work arrangements.More About VSO: VSO is a hybrid cloud and managed services consulting firm. Much of VSO’s success can be attributed to our deep partnerships with IT services industry leaders such as AWS, IBM, Microsoft and others. VSO leverages numerous other partner relationships so as to provide our customers with optimal support. Additionally, we take pride in taking care of our employees. We offer a wide variety of benefits for eligible employees related to health, retirement, professional development, and more! For more information, please visit our website at <https://vso-inc.com/careersSalary> Description$210,000K - $250,000K