Cloud Security Engineer Jobs in Virginia
Cloud Security Engineer jobs in Virginia are among the most active in the country, concentrated in defense contracting, federal civilian agencies, and commercial cloud services, with openings at every level from junior analyst to principal architect. The heaviest hiring is in Northern Virginia, Richmond, and the Hampton Roads metro, where employers such as Booz Allen Hamilton, Leidos, and General Dynamics Information Technology maintain large, long-term security engineering teams. The most in-demand specialties are cloud security architecture, zero-trust implementation, and security operations for AWS and Azure environments. Find a role that fits below and apply directly.
Find Cloud Security Engineer JobsOverview
Showing 5 of 42+ Cloud Security Engineer jobs
Job Description:
Quevera is seeking an AWS Cloud Security Engineer with an active TS/SCI clearance to support security architecture, automation, compliance, and security posture management across a complex, multi-vendor AWS environment.
The position supports work across Herndon, Virginia; Springfield, Virginia; Denver, Colorado; and Seattle, Washington, with work split approximately 80% low-side and 20% high-side. Remote work is acceptable, but candidates must be willing and able to work from AWS SCIFs as required.
Job Responsibilities:
- Design and implement intelligent model-routing logic using ML-based classification to route requests to appropriate LLMs based on conversational context, task complexity, and performance requirements.
- Build and maintain orchestration layers using AWS Bedrock, LangChain, or custom frameworks to support multi-model workflows.
- Train, evaluate, and iterate on classification models using evaluation frameworks and feedback loops.
- Architect conversation-context analysis, retrieval, and embedding strategies to interpret user intent across multi-turn interactions.
- Develop prompt-engineering standards and context-window management techniques supporting intent classification and routing.
- Architect enterprise-scale GenAI solutions with high availability, performance optimization, and cost management.
- Apply GenAI platform practices including observability, model evaluation, guardrails, responsible AI controls, and versioning.
- Design and maintain data extraction and transformation pipelines supporting model training, evaluation, and enterprise application integration.
- Engage with customer stakeholders and technical counterparts to gather requirements, validate solutions, and participate in Agile/Scrum ceremonies.
- Collaborate with the Engagement Manager to track progress and risks and produce technical documentation, architecture diagrams, and handoff artifacts.
Minimum Requirements:
- Develop reusable Infrastructure as Code (IaC) and cross-account integrations to standardize and centralize security services across a complex, multi-vendor environment with distributed AWS accounts under an externally managed organization.
- Assess current security posture and drive vendor alignment with organizational standards.
- Help shape government security processes and support the production of compliance artifacts, including IATTs and ATOs.
- Integrate distributed logging to a centralized reviewer (C5ISR).
Desired Skills:
- Active TS/SCI clearance required.
- Must be willing and able to work from AWS SCIFs as required.
- Candidates must be local to Herndon, Virginia; Denver, Colorado; or Seattle, Washington.
Work Location:
- AWS IAD21 – Herndon, Virginia
- Customer Site – Springfield, Virginia
- Denver, Colorado
- Seattle, Washington
- Work split: approximately 80% low-side / 20% high-side.
- Remote work is acceptable, with attendance at AWS SCIFs as required.
Why Join Quevera?
Award-Winning Culture
Quevera was recognized as a Top Workplace in the Washington, DC/Baltimore region for 2025, marking our fifth consecutive year receiving this distinction based on employee feedback.
Outstanding Benefits
We invest in our employees and their families through a highly competitive benefits package, including:
- 100% employer-paid medical coverage (optional plan)
- Competitive options for Medical, Dental and Vision insurance
- Employer-paid short-term and long-term disability coverage
- Employer-paid life insurance
- $5,000 annually for education, training, certifications, and professional development
- Career advancement through our structured iQTouch Program
- Up to 6% 401(k) match
- Additional 4% profit-sharing contribution, at company discretion
At Quevera, we believe exceptional people deserve exceptional opportunities. We're more than just a workplace—we're a team of innovators, problem-solvers, and industry experts committed to delivering mission-critical solutions while fostering professional growth, collaboration, and technical excellence.
Quevera is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age or any other characteristic protected by law. #LI-AA1
Job Description:
Quevera is seeking an AWS Cloud Security Engineer with an active TS/SCI clearance to support security architecture, automation, compliance, and security posture management across a complex, multi-vendor AWS environment.
The position supports work across Herndon, Virginia; Springfield, Virginia; Denver, Colorado; and Seattle, Washington, with work split approximately 80% low-side and 20% high-side. Remote work is acceptable, but candidates must be willing and able to work from AWS SCIFs as required.
Job Responsibilities:
- Design and implement intelligent model-routing logic using ML-based classification to route requests to appropriate LLMs based on conversational context, task complexity, and performance requirements.
- Build and maintain orchestration layers using AWS Bedrock, LangChain, or custom frameworks to support multi-model workflows.
- Train, evaluate, and iterate on classification models using evaluation frameworks and feedback loops.
- Architect conversation-context analysis, retrieval, and embedding strategies to interpret user intent across multi-turn interactions.
- Develop prompt-engineering standards and context-window management techniques supporting intent classification and routing.
- Architect enterprise-scale GenAI solutions with high availability, performance optimization, and cost management.
- Apply GenAI platform practices including observability, model evaluation, guardrails, responsible AI controls, and versioning.
- Design and maintain data extraction and transformation pipelines supporting model training, evaluation, and enterprise application integration.
- Engage with customer stakeholders and technical counterparts to gather requirements, validate solutions, and participate in Agile/Scrum ceremonies.
- Collaborate with the Engagement Manager to track progress and risks and produce technical documentation, architecture diagrams, and handoff artifacts.
Minimum Requirements:
- Develop reusable Infrastructure as Code (IaC) and cross-account integrations to standardize and centralize security services across a complex, multi-vendor environment with distributed AWS accounts under an externally managed organization.
- Assess current security posture and drive vendor alignment with organizational standards.
- Help shape government security processes and support the production of compliance artifacts, including IATTs and ATOs.
- Integrate distributed logging to a centralized reviewer (C5ISR).
Desired Skills:
- Active TS/SCI clearance required.
- Must be willing and able to work from AWS SCIFs as required.
- Candidates must be local to Herndon, Virginia; Denver, Colorado; or Seattle, Washington.
Work Location:
- AWS IAD21 – Herndon, Virginia
- Customer Site – Springfield, Virginia
- Denver, Colorado
- Seattle, Washington
- Work split: approximately 80% low-side / 20% high-side.
- Remote work is acceptable, with attendance at AWS SCIFs as required.
Why Join Quevera?
Award-Winning Culture
Quevera was recognized as a Top Workplace in the Washington, DC/Baltimore region for 2025, marking our fifth consecutive year receiving this distinction based on employee feedback.
Outstanding Benefits
We invest in our employees and their families through a highly competitive benefits package, including:
- 100% employer-paid medical coverage (optional plan)
- Competitive options for Medical, Dental and Vision insurance
- Employer-paid short-term and long-term disability coverage
- Employer-paid life insurance
- $5,000 annually for education, training, certifications, and professional development
- Career advancement through our structured iQTouch Program
- Up to 6% 401(k) match
- Additional 4% profit-sharing contribution, at company discretion
At Quevera, we believe exceptional people deserve exceptional opportunities. We're more than just a workplace—we're a team of innovators, problem-solvers, and industry experts committed to delivering mission-critical solutions while fostering professional growth, collaboration, and technical excellence.
Quevera is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age or any other characteristic protected by law. #LI-AA1
See All 42 Cloud Security Engineer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Cloud Security Engineer JobsCloud Security Engineer Jobs by City in Virginia
Where Virginia roles are concentrated, by current openings.
Cloud Security Engineer Job Market in Virginia
A snapshot from current Virginia openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Distribution & Wholesale
What Virginia Employers Look For
The qualifications that appear most often in cloud security engineer jobs across Virginia.
- Active DoD security clearance, typically Secret or Top Secret with SCI eligibility
- Industry certification such as CISSP, CCSP, or AWS Security Specialty
- Hands-on experience securing cloud environments on AWS, Azure, or Google Cloud
- Proficiency with infrastructure-as-code tools including Terraform and CloudFormation
- Knowledge of NIST, FedRAMP, and CMMC compliance frameworks common in Virginia contracts
- Bachelor's degree in computer science, information security, or a related technical field
Cloud Security Engineer Jobs in Virginia: Frequently Asked Questions
How do you become a cloud security engineer in Virginia?
Virginia has no state-issued license specific to cloud security engineering, so the path runs through education, clearance, and certification. Most roles require a bachelor's degree in computer science, cybersecurity, or a related field, followed by foundational certifications like CompTIA Security+ and then advanced credentials such as CISSP or CCSP. Because the Virginia market is heavily defense-driven, obtaining a DoD security clearance early significantly expands the pool of available positions.
How much do cloud security engineers make in Virginia?
Cloud security engineers in Virginia earn a median of about $134,900 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $81,410 for the lowest 10% to over $205,750 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire cloud security engineers in Virginia?
Employers hiring cloud security engineers in Virginia right now include Booz Allen Hamilton, Amazon, and Amazon Web Services, based on current listings on Migrate Mate as of September 2026. Virginia's dense concentration of defense contractors and federal agencies means many of these roles require or prefer candidates who already hold an active security clearance.
Which Virginia cities have the most cloud security engineer jobs?
Herndon, McLean, and Reston have the most cloud security engineer openings in Virginia. Northern Virginia leads by a wide margin because it hosts the headquarters and delivery centers of the country's largest defense and intelligence contractors, while Richmond and Hampton Roads generate openings tied to state government IT modernization and Navy and Air Force installation support.
Are there remote cloud security engineer jobs in Virginia?
Yes, and more than most technical fields. About 50% of cloud security engineer openings tied to Virginia are remote or hybrid as of September 2026, reflecting the fact that much of this work involves managing cloud consoles, reviewing policy configurations, and conducting code reviews that travel easily over a secure connection. Roles requiring access to classified systems or on-site lab environments are more likely to be fully in-office.
How can I get hired as a cloud security engineer in Virginia with little or no experience?
The most realistic entry path is a junior cloud or security operations role with a defense contractor or a federal agency contractor in Northern Virginia. Large Virginia-based employers such as Booz Allen Hamilton and Leidos run early-career programs and bring on associate security analysts who move into cloud security with on-the-job training. Lateral moves from network administration, IT help desk, or systems administration roles are common. CompTIA Security+ and an AWS Cloud Practitioner certification give candidates a measurable edge at the application stage.
Where can I find and apply to cloud security engineer jobs in Virginia?
You can find and apply to cloud security engineer jobs in Virginia on Migrate Mate, which lists current Virginia openings updated in real time. Search the listings, find roles that match your background and clearance level, and apply directly to the ones that fit.
See All 42 Cloud Security Engineer Jobs in Virginia
Find roles in Virginia that match your experience and apply in just a few clicks.
Find Cloud Security Engineer Jobs