Senior Cloud Security Engineer (AWS / IAM)

Senior Cloud Security Engineer (AWS / IAM)
Baltimore, MD – Hybrid, onsite 2 days per week
6 months Contract to Hire
W2 Hourly rate for contract period: $95/hr. to $106/hr. Benefits available
Annual Salary Target: $180,000 to $200,000 annually, plus benefits
State Program requires a U.S. citizen or a legal permanent resident
Background Check required

Summary
System One IT is seeking a Senior Cloud Security Engineer with deep experience securing large, mission-critical, and public-facing systems. Focus on AWS security operations, IAM (ForgeRock/SailPoint), incident response, and compliance in regulated environments. This is a 6-month contract-to-hire position for a leading systems integrator, supporting a State of Maryland program. US Citizenship or Legal Permanent Residency is required, along with a pre-employment background investigation.
Hybrid – 2 days a week onsite in Baltimore, MD.

Core Responsibilities

• Operate and monitor security controls for enterprise IT systems
• Lead cloud security operations in AWS (WAF, GuardDuty, Macie, CloudTrail, CloudWatch, Control Tower)
• Perform security monitoring, incident response, and forensics using SIEM tools
• Administer security for Windows and Linux systems
• Implement and manage IAM solutions (ForgeRock, SailPoint, SSO, provisioning, lifecycle management)
• Assess risks, vulnerabilities, and implement mitigations
• Support audits, compliance, and security roadmap execution

Minimum Qualifications

• 8+ years enterprise / mission-critical system security
• 5+ years hands-on security operations
• 4+ years AWS cloud security (production environments)
• 4+ years of Windows and Linux security administration
• Incident response and SIEM experience

Preferred Qualifications

• 5+ years securing public-facing complex systems
• 5+ years ForgeRock and SailPoint IAM support
• IAM integrations (AD, LDAP, databases), SSO, lifecycle management
• Experience with NIST 800-37/53, IRS 1075, MARS-E
• Vulnerability management, penetration testing, firewall administration
• Scripting (Java, JavaScript, shell)
• Security certifications (CISSP or equivalent)

System One, and its subsidiaries including Joulé, ALTA IT Services, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

Ref: #851-Rockville-S1

#M-MM1
#LI-MM1
#DI-MM1

System One, and its subsidiaries including Joulé, ALTA IT Services, TeamPeople, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.