Cloud Security Engineer

Meet Our Team:

This team is part of Pega’s Cloud Cybersecurity organization within the Cloud Cybersecurity Operations tribe. We build the AI-driven automation, tooling, and response capabilities that protect Pega’s cloud environments, including FedRAMP-regulated government infrastructure, commercial AWS, and multi-cloud platforms. Our work spans AI-assisted remediation, identity automation, compliance tooling, and SOAR response actions. Engineers on this team pair modern AI tooling with hands-on cloud security to move fast and ship real automation. 

Due to the nature of the role's work with FedRamp, US Citizenship is required. This role is based out of our Dulles (Washington DC) office

Picture Yourself at Pega:

This is an AI-first engineering role for someone early in their career who wants to build. You’ll spend the majority of your time developing AI-driven security automation, remediation pipelines, identity workflows, and intake tooling, all while gaining hands-on operational experience supporting Pega’s PCFG (FedRAMP Government) and Commercial cloud environments. You’ll learn alongside senior engineers, contribute to feature delivery from day one, and grow your cloud security operations foundation as you go. 

You write code, use AI tools to accelerate how you build, and validate what you ship. Ops experience is a plus that you’ll deepen here , AI and automation skills are what we’re optimizing for. 

What You'll Do at Pega:

AI-Driven Automation & Tooling (45%) 

• Build and iterate on AI-assisted remediation features — SOAR response actions, AWS Config automation, and AI intake tooling — alongside senior engineers 

• Use AI tools (Copilot, ChatGPT, or similar) to scaffold automation, generate test cases, and accelerate repetitive engineering work, then validate the output before it ships 

• Develop automation in Python and shell to reduce manual security operations toil 

• Contribute to AI-assisted certification and access-review automation to streamline identity workflows 

• Help prototype and improve internal tooling that applies AI to triage, enrich, and route security findings 

Identity & Access Automation (20%) 

• Build and maintain entitlement automation workflows for joiner/mover/leaver processes 

• Support Okta administration for PCFG and Commercial environments: MFA resets, account provisioning, and Okta Verify troubleshooting 

• Assist with IAM roles, permission boundaries, and access reviews across PCFG accounts, learning the environment as you automate it 

• Support SailPoint quarterly certifications and access request workflows 

Cloud Security Operations Foundation (20%) 

• Support vulnerability scanning with Nessus/Tenable, Netsparker, or AWS Inspector and help track findings to closure 

• Help respond to audit scan requests (SOC, FedRAMP assessors) by gathering findings and evidence 

• Assist with FedRAMP compliance patching cycles and contribute to SSM Patch Manager automation to reduce manual overhead over time 

• Learn what compliance-driven delivery looks like in a regulated environment 

Cloud Infrastructure Engineering (15%) 

• Contribute to infrastructure automation: CloudFormation role deployment, account lifecycle, and SSM alerting 

• Respond to ad-hoc infrastructure requests: IAM policy changes, Lambda roles, and Bedrock model enablement 

• Treat infrastructure and security content as code — use PR-gated workflows and GitHub Actions 

What You've Accomplished:

• 2–3 years of experience in software/automation engineering, cloud security, or a closely adjacent role — and you’re eager to grow your operations depth 

• AI-first builder: you use AI tools (Copilot, ChatGPT, or similar) as part of how you build — scaffolding automation, generating test cases, accelerating repetitive work — and you know how to validate what comes out 

• Comfortable writing automation: Python and shell; exposure to CloudFormation or Terraform is a plus 

• Working knowledge of AWS fundamentals (IAM, CloudFormation, and services like SSM, Inspector, Config, or GuardDuty) — depth is a plus, appetite to learn is required 

• Familiar with GitHub-based workflows: comfortable with PR-gated reviews and GitHub Actions, and treating infrastructure and security content as code 

• Some operational exposure to identity platforms (Okta, SailPoint, or equivalent) or vulnerability scanning tools is a plus — you’ll build depth here 

• Curious about regulated environments: prior FedRAMP or compliance-driven experience is a bonus, not a requirement 

• Exposure to SOAR platforms (Chronicle SecOps, Siemplify, or similar) is a plus 

• You thrive on learning: you context-switch between building new automation and supporting operational work, and you ask good questions rather than waiting to be told 

Pega Offers You:

• Gartner Analyst acclaimed technology leadership across our categories of products
• Continuous learning and development opportunities
• An innovative, inclusive, agile, flexible, and fun work environment
• Competitive global benefits program inclusive of pay + bonus incentive, employee equity in the company (#LI-KH2)

Additional Information

Base salary range for this role is 86,700 - 129,600 USD annually. This role may also be eligible for annual bonus OR commission, as well as benefits and other incentives.

The final compensation will be determined during the offer process based on the candidate's education, experience, skills, and qualifications, as well as market conditions and may vary from the posted range. We will share an information on benefits, bonus/commission, and other pay components for this role at the relevant recruitment stage.