AWS Security Engineer/Migrations

We are seeking an experienced Cloud Security Engineer (10 years minimum) with a proven track record leading the migration of on-premises network infrastructure into AWS. This role is built for a cloud-native security professional, not a traditional network engineer, who has hands-on experience migrating servers, firewalls, VPNs, and load balancers into AWS and re-architecting them using AWS-native services. The ideal candidate has already led this exact type of migration and can speak directly to the tradeoffs, architecture decisions, and security posture required to do it at scale.

Core Focus: AWS Migration & Cloud Security
Lead end-to-end migration of on-prem network infrastructure (firewalls, VPNs, servers) into AWS, replacing legacy hardware with cloud-native equivalents
Architect AWS networking: VPCs, subnets, routing, Transit Gateway, VPN connections, and hybrid connectivity between on-prem and cloud environments
Deploy and manage AWS security services including Security Groups, Network Firewall, WAF, Shield, GuardDuty, and IAM
Implement AWS load balancing (ALB, ELB, Gateway Load Balancer) and CloudWatch observability for migrated infrastructure
Own cloud security posture across AWS environments, ensuring compliance with SOX, PCI, and other cybersecurity frameworks
Lead incident response and forensic investigations for cloud-based security events

Technical Requirements
5+ years working within AWS, with direct ownership of cloud security architecture
Proven experience migrating on-prem network infrastructure (firewalls, VPNs, servers) into AWS, approached from the cloud side
Proficiency in Infrastructure-as-Code: Terraform, Ansible, and Python automation
Familiarity with CI/CD pipelines and GitHub workflows
Working knowledge of Palo Alto or equivalent firewall technology, as it maps to cloud firewall concepts
Comfortable in Linux/RHEL environments and command-line troubleshooting
GCP experience a plus