Cloud Security Engineer

Cloud Security Engineer


Job Category: Engineering & Cloud


Location: US - Virginia - Sterling


Meet Our Team:


This team is part of Pega’s Cloud Cybersecurity organization within the Cloud Cybersecurity Operations tribe. We build the AI-driven automation, tooling, and response capabilities that protect Pega’s cloud environments, including FedRAMP-regulated government infrastructure, commercial AWS, and multi-cloud platforms. Our work spans AI-assisted remediation, identity automation, compliance tooling, and SOAR response actions. Engineers on this team pair modern AI tooling with hands-on cloud security to move fast and ship real automation.


_Due to the nature of the role's work with FedRamp, US Citizenship is required. This role is based out of our Dulles (Washington DC) office_


Picture Yourself at Pega:


This is an AI-first engineering role for someone early in their career who wants to build. You’ll spend the majority of your time developing AI-driven security automation, remediation pipelines, identity workflows, and intake tooling, all while gaining hands-on operational experience supporting Pega’s PCFG (FedRAMP Government) and Commercial cloud environments. You’ll learn alongside senior engineers, contribute to feature delivery from day one, and grow your cloud security operations foundation as you go.


You write code, use AI tools to accelerate how you build, and validate what you ship. Ops experience is a plus that you’ll deepen here , AI and automation skills are what we’re optimizing for.


What You'll Do at Pega:


AI-Driven Automation & Tooling (45%)


+ Build and iterate on AI-assisted remediation features — SOAR response actions, AWS Config automation, and AI intake tooling — alongside senior engineers


+ Use AI tools (Copilot, ChatGPT, or similar) to scaffold automation, generate test cases, and accelerate repetitive engineering work, then validate the output before it ships


+ Develop automation in Python and shell to reduce manual security operations toil


+ Contribute to AI-assisted certification and access-review automation to streamline identity workflows


+ Help prototype and improve internal tooling that applies AI to triage, enrich, and route security findings


Identity & Access Automation (20%)


+ Build and maintain entitlement automation workflows for joiner/mover/leaver processes


+ Support Okta administration for PCFG and Commercial environments: MFA resets, account provisioning, and Okta Verify troubleshooting


+ Assist with IAM roles, permission boundaries, and access reviews across PCFG accounts, learning the environment as you automate it


+ Support SailPoint quarterly certifications and access request workflows


Cloud Security Operations Foundation (20%)


+ Support vulnerability scanning with Nessus/Tenable, Netsparker, or AWS Inspector and help track findings to closure


+ Help respond to audit scan requests (SOC, FedRAMP assessors) by gathering findings and evidence


+ Assist with FedRAMP compliance patching cycles and contribute to SSM Patch Manager automation to reduce manual overhead over time


+ Learn what compliance-driven delivery looks like in a regulated environment


Cloud Infrastructure Engineering (15%)


+ Contribute to infrastructure automation: CloudFormation role deployment, account lifecycle, and SSM alerting


+ Respond to ad-hoc infrastructure requests: IAM policy changes, Lambda roles, and Bedrock model enablement


+ Treat infrastructure and security content as code — use PR-gated workflows and GitHub Actions


What You've Accomplished:


+ 2–3 years of experience in software/automation engineering, cloud security, or a closely adjacent role — and you’re eager to grow your operations depth


+ AI-first builder: you use AI tools (Copilot, ChatGPT, or similar) as part of how you build — scaffolding automation, generating test cases, accelerating repetitive work — and you know how to validate what comes out


+ Comfortable writing automation: Python and shell; exposure to CloudFormation or Terraform is a plus


+ Working knowledge of AWS fundamentals (IAM, CloudFormation, and services like SSM, Inspector, Config, or GuardDuty) — depth is a plus, appetite to learn is required


+ Familiar with GitHub-based workflows: comfortable with PR-gated reviews and GitHub Actions, and treating infrastructure and security content as code


+ Some operational exposure to identity platforms (Okta, SailPoint, or equivalent) or vulnerability scanning tools is a plus — you’ll build depth here


+ Curious about regulated environments: prior FedRAMP or compliance-driven experience is a bonus, not a requirement


+ Exposure to SOAR platforms (Chronicle SecOps, Siemplify, or similar) is a plus


+ You thrive on learning: you context-switch between building new automation and supporting operational work, and you ask good questions rather than waiting to be told


Pega Offers You:


+ Gartner Analyst acclaimed technology leadership across our categories of products

+ Continuous learning and development opportunities

+ An innovative, inclusive, agile, flexible, and fun work environment

+ Competitive global benefits program inclusive of pay + bonus incentive, employee equity in the company(#LI-KH2)


Additional Information


Base salary range for this role is 86,700 - 129,600 USD annually. This role may also be eligible for annual bonus OR commission, as well as benefits and other incentives.


The final compensation will be determined during the offer process based on the candidate's education, experience, skills, and qualifications, as well as market conditions and may vary from the posted range. We will share an information on benefits, bonus/commission, and other pay components for this role at the relevant recruitment stage.


Job ID: 23853


AI in Action – Responsible Use of AI in Recruitment

Pega embraces the responsible use of artificial intelligence (AI) to improve efficiency, consistency, and fairness across our business. We encourage thoughtful and ethical adoption of AI technologies that support people—not replace them. We may use AI‑enabled tools in our recruitment process. These tools are designed to assist us by providing insights and operational support.


All hiring decisions are made based on human review and judgment. You may have the right to request human review, provide additional information, or raise questions about how such tools are used.


Culture

At Pegasystems, we foster an environment where people feel valued and empowered to contribute their best. With global clients across industries and regions, we know our success depends on the unique perspectives, experiences, and talents of our people. Ours is a workplace where everyone can grow, collaborate, and deliver meaningful outcomes.


We encourage candidates from all backgrounds and experiences and focus on the core competencies and mindset needed to thrive in a role.


As an Equal Opportunity employer, Pegasystems will not discriminate in its employment practices due to an applicant's race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, veteran or disability status, or any other category protected by law.


This same mindset shapes how we work, encouraging curiosity, continuous learning, and smarter ways of working with AI. At Pegasystems, we believe the best ideas come from curious people who embrace change, learn continuously, and use AI to work smarter and move faster. Guided by our values, we bring a growth mindset to every challenge and create lasting impact together.


Export Compliance

For positions requiring access to technical data subject to export control regulations such as this, Pegasystems may need to obtain export license approval from the U.S. Government and EU Authorities for certain individuals.


Accommodations

If you require reasonable accommodations under the Americans with Disabilities Act (US only) or comparable regional regulations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process,or contact (US only) 1-888-PEGA-NOW and/or 225 Wyman Street Waltham, MA 02451 ATTN: Benefits.


Privacy Notices


Ready to build a Blueprint?


Choose the reinvention engine for your needs.


For workflows & app design


Reimagine your processes and turn any workflow into a build-ready
application with confidence.


For marketing & CX strategy design


Visualize customer journeys and engagement strategies across all
touchpoints and activate them.
It is Pega's policy to engage, recruit, hire, promote, train, discipline, and compensate in all job classifications, without regard to race, color, sex, religion, national origin, age, disability, sexual orientation, gender identity, veteran status, or any other category protected by law.

https://www.pega.com/about/careers/equal-employment-opportunity