Senior Cloud Security & Compliance Engineer

Senior Cloud Security & Compliance Engineer



Location: Remote



Contract: 1+ Year



Visa: GC/USC/GC-EAD



Interview: Video interview

Job Description

We are seeking an experienced Senior Cloud Security & Compliance Engineer to join the security-focused workstream of a large and complex AWS program supporting a highly regulated financial services client.

This role will focus specifically on cloud security, risk, compliance, infrastructure hardening, vulnerability remediation, and security controls across a large AWS environment. The ideal candidate will be a hands-on security engineer with strong Terraform and CI/CD experience who is also comfortable working with formal security reviews, audits, compliance frameworks, and client risk and compliance teams.

Required Qualifications

• Strong hands-on experience with AWS and Terraform , including development and maintenance of Terraform modules for security hardening.
• Strong knowledge of AWS security services and best practices, including IAM, KMS, VPC/networking, secrets management, CloudTrail, Config, Security Hub, and GuardDuty .
• Demonstrated experience implementing security and compliance controls in highly regulated environments ; financial services experience is strongly preferred.
• Experience working with regulated or sensitive data and implementing appropriate security controls.
• Strong understanding of compliance frameworks, formal security reviews, audit processes, and certification requirements.
• Practical experience with vulnerability management, vulnerability triage, risk assessment, and remediation .
• Experience creating, maintaining, or applying threat models to identify risks and define security controls.
• Hands-on experience migrating legacy applications and infrastructure to AWS, including workloads migrated from on-premises or VMware environments .
• Experience designing or supporting disaster recovery, high availability, resiliency, and multi-region AWS architectures .
• Experience with CI/CD automation and security tooling.
• Strong communication and stakeholder-management skills, with the ability to work directly with client risk, compliance, audit, engineering, and delivery teams.
• Ability to create professional customer-facing technical documentation and manage technical handoffs.
• Ability to work effectively in large, complex, multi-stakeholder programs.

Qualifications

• Previous AWS Professional Services (ProServe) or consulting experience.
• Experience supporting formal organizational security certification programs.
• Experience with SOC 2, ISO 27001 , or similar security and compliance frameworks.
• Experience working with financial services organizations or other highly regulated industries.
• Strong understanding of security governance, risk management, and compliance processes within cloud environments.