Senior Cloud Security Engineer

Key Responsibilities
Architecture & Strategy:Design and implement secure multi-account AWS cloud architectures landing zones (Control Tower) and identity/access management solutions using AWS IAM and IAM Identity Center based on least-privilege principles.
Security Guardrails & Governance:Define cloud security standards governance frameworks and automated guardrails; lead threat modeling risk assessments and security architecture reviews across cloud applications and infrastructure.
Network & Perimeter Defense:Configure robust network security controls including VPC architecture network segmentation private connectivity AWS WAF and security group policies.
Automation & DevSecOps:Drive end-to-end security automation using Infrastructure as Code (Terraform CloudFormation) and partner with development and operational teams to embed DevSecOps controls into CI/CD pipelines.
Posture Management & Operations:Oversee vulnerability management cloud security posture management (CSPM) SIEM integrations (such as Microsoft Sentinel) and threat remediation efforts using native tools like Security Hub GuardDuty Config CloudTrail KMS and Secrets Manager.
Compliance & Leadership:Align cloud environments with industry frameworks (NIST CIS ISO 27001 SOC 2 PCI HIPAA) mentor junior cloud security engineers and provide technical leadership across cross-functional teams.
Qualifications
Experience:Minimum 7 years of broad IT experience across infrastructure networking and OS management with at least 5 years of hands-on expertise dedicated to AWS cloud infrastructure and application security.
AWS Core Expertise:Deep knowledge of AWS security services containerization security (ECS EKS) Zero Trust architecture principles and multi-account management.
Automation & Scripting:Strong hands-on proficiency with Infrastructure as Code (Terraform or CloudFormation) and scripting languages (Python PowerShell or Bash).
Compliance & Governance:Demonstrated experience implementing and enforcing compliance standards such as NIST CIS ISO 27001 SOC 2 PCI or HIPAA.
Soft Skills:Proven ability to work independently manage priority issues with urgency drive collaborative solutions across integrated teams and clearly communicate complex security concepts to key stakeholders.

Required Skills:

VPCCLOUD SECURITYAUTOMATIONCI/CDPOWERSHELLPYTHON