Cloud Security Engineer

Pegasystems Inc

VA

JOB DETAILS
SALARY
$86,700–$129,600 Per Year
SKILLS
AWS Lambda, Agile Programming Methodologies, Amazon Web Services (AWS), Analysis Skills, Artificial Intelligence (AI), Automation, Blog, Blueprints, Cloud Computing, Code Reviews, Compensation Management, Compensation and Benefits, Computer Programming, Computer Security, Consulting, Continuous Deployment/Delivery, Continuous Integration, English Language, Facebook, GitHub, Government, Identify Issues, Internet Security, Jenkins, LinkedIn, Machine Tool, Maintain Compliance, Metrics, Nessus, Operating Systems, Operational Support, Operations Security (OPSEC), Product Demonstration, Product Design, Public/Media/Press/Analyst Relations, Python Programming/Scripting Language, Regulations, Scaffolding, Scripting (Scripting Languages), Software Engineering, Software Patches, Systems Administration/Management, Technical Leadership, Technical Support, Test Automation, Test Case, Trademarks, Twitter, United States Citizen, Unix Shell Programming, Vulnerability Scanners, YouTube
LOCATION
VA
POSTED
4 days ago

Search All Jobs

Cloud Security Engineer

Job Category: Engineering & Cloud

Location: US - Virginia - Dulles

  • Apply now
  • Share Share via Facebook Share via X Share via LinkedIn Share via Email Copy share link Copying...

Copied!

Meet Our Team:

This team is part of Pega's Cloud Cybersecurity organization within the Cloud Cybersecurity Operations tribe. We help build and operate the security controls, automation, and response capabilities that protect Pega''s cloud environments, including FedRAMP-regulated government infrastructure, commercial AWS, and multi-cloud platforms. We work across IAM, vulnerability management, compliance automation, SOAR response actions, and AI-driven security tooling. Engineers on this team own their domains end-to-end: design, build, operate, and iterate.

Due to the nature of the role''s work with FedRamp, US Citizenship is required

Picture Yourself at Pega:

You''ll be a part owner of Pega''s FedRamp/cloud environment, responsible for both day-to-day operational security and sprint-based feature delivery. You''ll work alongside peers delivering AI-driven remediation pipelines, identity automation, and cloud security tooling, and are expected to contribute to that innovation work alongside your responsibilities.

This is an engineering role. You write code, build automation, operate regulated infrastructure, and ship features, not just process tickets.

What You''ll Do at Pega:

Access Governance & Identity Operations (30%)

  • Own Okta administration for PCFG and Commercial environments: MFA resets, account provisioning, Okta Verify troubleshooting, policy enforcement
  • Manage IAM roles, permission boundaries, deployment entitlements, and access reviews across PCFG accounts (CloudOps, Jenkins, deployment pipelines)
  • Build and maintain entitlement automation workflows for joiner/mover/leaver processes
  • Support SailPoint quarterly certifications and access request workflows; contribute to AI-assisted certification automation

Vulnerability Scanning & Remediation (25%)

  • Operate Nessus/Tenable and Netsparker scanning across PCFG RnD and PCFG Prod
  • Respond to audit scan requests (UKCE, SOC, FedRAMP assessors) with findings and evidence
  • Track and ensure zero high-severity findings outstanding beyond 30 days

Compliance Patching & BAU (25%)

  • Execute FedRAMP Control Plane patching cycle every sprint - mandatory compliance obligation, non-negotiable
  • Execute PCFG RnD OS automated patching and validate Commercial environment patches (SailPoint, PingCastle)
  • Maintain patch compliance metrics; escalate blockers before sprint close
  • Contribute to SSM Patch Manager automation to reduce manual patching overhead over time

Cloud Infrastructure & Automation Engineering (20%)

  • Build infrastructure automation: Control Tower account provisioning, PCFG account lifecycle, CloudFormation role deployment
  • Develop SSM Patch Manager alerting and role infrastructure
  • Respond to ad-hoc infrastructure requests: IAM policy changes, Global Accelerator, Lambda roles, Bedrock model enablement
  • Contribute to team-wide AI-driven remediation features - SOAR response actions, AWS Config automation, and AI intake tooling

What You''ve Accomplished:

  • 3+ years in cloud security engineering or a closely adjacent role; hands-on with AWS (IAM, CloudFormation, SSM, Inspector, Config, GuardDuty)
  • Experience operating in a FedRAMP or similarly regulated environment, you understand what compliance-driven delivery looks like
  • Proficient with identity platforms: Okta administration, SailPoint or equivalent IGA tooling
  • Comfortable writing automation: Python, shell, CloudFormation/Terraform, you don''t wait for someone else to build the script
  • Familiar with vulnerability scanning tools (Nessus/Tenable, Netsparker, or AWS Inspector)
  • You operate well in a team that splits time between BAU obligations and feature delivery, context-switching is part of the job
  • Exposure to SOAR platforms (Chronicle SecOps, Siemplify, or similar) is a plus
  • Experience with GitHub-based CI/CD pipelines,you''re comfortable with PR-gated workflows, GitHub Actions, and treating infrastructure and security content as code that gets reviewed before it ships
  • You use AI tools (Copilot, ChatGPT, or similar) as part of how you build, scaffolding automation, generating test cases, accelerating repetitive engineering work and you know how to validate what comes out

Pega Offers You:

  • Gartner Analyst acclaimed technology leadership across our categories of products
  • Continuous learning and development opportunities
  • An innovative, inclusive, agile, flexible, and fun work environment
  • Competitive global benefits program inclusive of pay + bonus incentive, employee equity in the company (#LI-KH2)

Additional Information

Base salary range for this role is 86,700 - 129,600 USD annually. This role may also be eligible for annual bonus OR commission, as well as benefits and other incentives.

The final compensation will be determined during the offer process based on the candidate''s education, experience, skills, and qualifications, as well as market conditions and may vary from the posted range. We will share an information on benefits, bonus/commission, and other pay components for this role at the relevant recruitment stage.

Job ID: 23853

AI in Action - Responsible Use of AI in Recruitment

Pega embraces the responsible use of artificial intelligence (AI) to improve efficiency, consistency, and fairness across our business. We encourage thoughtful and ethical adoption of AI technologies that support people-not replace them. We may use AI‑enabled tools in our recruitment process. These tools are designed to assist us by providing insights and operational support.

All hiring decisions are made based on human review and judgment. You may have the right to request human review, provide additional information, or raise questions about how such tools are used.

Culture

At Pegasystems, we foster an environment where people feel valued and empowered to contribute their best. With global clients across industries and regions, we know our success depends on the unique perspectives, experiences, and talents of our people. Ours is a workplace where everyone can grow, collaborate, and deliver meaningful outcomes.

We encourage candidates from all backgrounds and experiences and focus on the core competencies and mindset needed to thrive in a role.

As an Equal Opportunity employer, Pegasystems will not discriminate in its employment practices due to an applicant''s race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, veteran or disability status, or any other category protected by law.

Export Compliance

For positions requiring access to technical data subject to export control regulations such as this, Pegasystems may need to obtain export license approval from the U.S. Government and EU Authorities for certain individuals.

Accommodations

If you require reasonable accommodations under the Americans with Disabilities Act (US only) or comparable regional regulations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please contact us here or contact (US only) 1-888-PEGA-NOW and/or 225 Wyman Street Waltham, MA 02451 ATTN: Benefits.

Labor Condition Applications

GDPR Candidate Privacy Notice

Pegasystems Limited UK Gender Pay Gap Statement

EEO/AA Policy Statement

Your Employee Rights Under the Family and Medical Leave Act

E-Verify Notice

Employee Polygraph Protection Act Rights

Ready to build a Blueprint?

Choose the reinvention engine for your needs.

For workflows & app design

Reimagine your processes and turn any workflow into a build-ready application with confidence.

Pega Blueprint

For marketing & CX strategy design

Visualize customer journeys and engagement strategies across all touchpoints and activate them.

Pega Customer Engagement Blueprint

Share this page Share via Facebook Share via X Share via LinkedIn Share via Email Copy share link Copying...

Copied!

About Pega

Pega delivers the platform to reimagine, run, and evolve the processes and decisions an enterprise can''t afford to get wrong. We combine AI with proven architecture to keep mission-critical operations governed, scalable, and continuously adaptable. Since 1983, the world''s largest organizations have trusted Pega to turn transformation ambition into durable results.

Join the conversation

Join the conversation

  • X (Twitter)
  • Facebook
  • Linkedin
  • Youtube

Company

Company

  • About Pega
  • Office Locations
  • Careers
  • Contact Us
  • US: 1-888-PEGA-NOW
  • AU: 1800 763 425

Pega Sites

Pega Sites

  • Community
  • Pega Forums
  • Pega Academy Training
  • Product Design
  • Partners
  • PegaWorld Conference
  • Blog
  • MyPega

Resources

Resources

  • Analyst Reports
  • Demo Videos
  • Pega Platform Trial
  • Partners & Consulting Services
  • Trust Center
  • Tech Knowledge

Languages

Languages

  • English
  • Français
  • Deutsch
  • Italiano
  • Português
  • Español

Legal

Legal

  • Terms of Use
  • Accessibility
  • Trademarks
  • Privacy
  • Your Privacy Choices

2026 Pegasystems Inc. Open in new window

About the Company

P

Pegasystems Inc

Since 1971, P E Systems has been providing professional systems engineering and acquisition management services. The firm has CONUS locations in Virginia, Maryland, Massachusetts, Oklahoma and Ohio, and overseas in Japan, Bahrain and Italy. The company provides a range of technical capabilities supporting many different clients. P E Systems practices a full service approach through its use of flexible, mission-oriented teams that bring the right resources together to meet all customer requirements. Our emphasis is on personnel both acquiring and retaining a staff of qualified engineering and technical professionals through selective recruiting and a comprehensive benefits program has contributed to our continued success in supporting a wide range of government organizations.

P E Systems has developed strong core capabilities in systems engineering, specialized acquisition support, and communications interface programs through provision of technical, program management and systems acquisition support as both a prime and subcontractor. We have established strategic relationships with our Partners.

P E Systems has a long history of providing superior technical support services in a cost-effective manner. Our Quality Policy further describes the focus on quality that helps us achieve this level of service.

  • 2017 –  Summit Research Corporation (SRC) merged into P E Systems on March 1, 2017, assuming all contract obligations
  • 2016 – Jack Grady appointed to Vice-President of Operations and Dayton Division Manager
  • 2007 – Opened new offices and San Antonio, TX
  • 2006 – Graduated from 8(a) program
  • 2003 – P E Systems achieves ISO 9001 certification
  • 2000 – P E Systems acquired Atlantic Analysis Corporation to enhance IT offerings with Oracle database development capabilities
  • 1998 – Acquired Bahan Dennis, Inc. (BDI), which has been integrated into the company operating structure, as the Dayton, OH Division. It provides program management and systems functional support to the Aeronautical Systems Center, AFMC, Material Systems Group (ESC) and the Air Force Reserve Command Detachments at Wright Patterson AFB, OH
  • 1997 – Became an 8(a) certified small business and gained approval for a GSA Schedule for Information Technology Services
  • 1996 – P E Systems acquired Summit Research Corporation (SRC) as a wholly owned subsidiary specializing in Exercise/Performance/Acoustic Analysis, Training, and Information Technology services, primarily for the U.S. Navy
  • 1995  – Wes King acquired P E Systems
  • 1971  –  P E Systems founded
  • 1971  –  P E Systems was formed to provide technical, scientific, and programmatic management and systems acquisition support to the Department of Defense as well as other government and commercial organizations
COMPANY SIZE
500 to 999 employees
INDUSTRY
Computer/IT Services
FOUNDED
1971
WEBSITE
https://www.pesystems.com/