Cloud Security Engineer

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.

Dragonfli Group is seeking a Cloud Security Engineer to support a multi-year cybersecurity modernization program for a large federal agency. In this role you will plan, implement, upgrade, and monitor the security measures that protect the agency's networks and information, with day-to-day work centered on cloud environments and on the automation and AI-enabled capabilities the program is standing up. You will design and develop security solutions for complex engineering, system administration, and network problems, and you will help shape the interface, quality assurance, and performance standards that govern those solutions. This position suits an engineer with roughly 2 to 3 years of hands-on cybersecurity experience who is ready to own technical problems end to end while working alongside a security architecture and engineering team.

This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency is required. If hired, all work related to this role must be performed within the continental U.S.

Responsibilities

• Plan, implement, upgrade, and monitor security measures protecting agency networks, systems, and information
• Ensure appropriate security controls are in place to safeguard digital files and vital electronic infrastructure
• Design and develop security solutions for complex problems, system administration issues, and network concerns
• Perform systems management and integration functions, primarily in cloud environments
• Support the integration and development of automated and AI-based solutions in complex cloud environments
• Assist in designing interface standards, quality assurance standards, and performance standards, and perform cost-benefit analysis of modern, state-of-the-art information systems
• Analyze available technologies and recommend which to adopt and how best to apply them
• Support security engineering delivery to the agency's cybersecurity architecture and engineering function
• Maintain, research, enhance, and engineer the agency's cybersecurity environment and toolsets to improve overall security posture
• Contribute to the design and implementation of a resilient architecture that integrates Zero Trust principles, including secure deployment, validation, and continuous monitoring of security controls
• Support Security Impact Assessments and help maintain interconnection and data exchange security agreements for secure cloud service integration

Must-Have

• Bachelor's degree in a technical or cybersecurity-related field
• 2 to 3 years of professional experience in cybersecurity with a working understanding of security engineering functions and capabilities
• Demonstrated experience implementing, upgrading, or monitoring security controls and security tooling
• Hands-on experience performing systems management and integration in cloud environments (AWS, Azure, or GCP)
• Experience designing or developing security solutions for complex system administration or network problems
• U.S. Citizenship or Permanent Residency, with all work performed within the continental U.S.
• Ability to pass a federal agency suitability or background investigation

Preferred / Nice-to-Have

• Prior federal contracting experience, particularly supporting a civilian agency cybersecurity program
• Experience supporting or building automation, low-code/no-code, or AI-enabled security capabilities
• Familiarity with Zero Trust architecture concepts and reference models
• Familiarity with NIST SP 800-37 and NIST SP 800-53 control implementation from an engineering perspective
• Experience with FedRAMP-authorized cloud services and the security agreements that govern their integration
• Certifications such as Security+, CySA+, AWS Certified Security, Azure Security Engineer Associate, or GIAC equivalents

Technical Skills

• Cloud security engineering and cloud systems integration (AWS, Azure, or GCP)
• Security control implementation, hardening, and configuration management
• Security tooling administration: SIEM, vulnerability management, endpoint, and identity platforms
• Automation and scripting (Python, PowerShell, Bash) and infrastructure-as-code concepts
• AI-enabled and low-code/no-code security capability integration
• Network and system architecture fundamentals, including segmentation and secure connectivity
• Zero Trust principles and continuous monitoring of security controls
• Technology evaluation, cost-benefit analysis, and standards development

Soft Skills

• Clear written and verbal communication with both technical and non-technical audiences
• Ability to work independently and as a contributing member of a distributed team
• Comfort operating in a fully remote setting with a camera-on meeting culture
• Sound judgment about when to decide and when to escalate
• Collaborative posture with system owners, business owners, developers, and assessors
• Attention to documentation quality and follow-through on commitments

Dragonfli Group offers a comprehensive benefits package that includes:

• Medical: Multiple POS health plan options including an HSA-compatible plan
• Dental: PPO coverage for preventive, basic, and major services
• Vision: Annual exam, frames, lenses, and contact lens allowance
• 401(k): Employer match up to 5% of eligible compensation
• Long-Term Disability: 100% employer-paid coverage at 50% of pre-disability earnings
• Life Insurance & AD&D: 100% employer-paid coverage valued at $10,000 each
• PTO: 15–25 days annually based on tenure, plus 16 hours of Floating PTO from day one
• Paid Federal Holidays: All 11 federal holidays observed