AWS Security Engineer/Migrations

Required Candidate Location: Secaucus, NJ HYBRID/ A FEW TIMES A QUARTER - NO RELOCATION

We are seeking an experienced (10+ Years) Cloud Security Engineer with a proven track record leading the migration of on-premises network infrastructure into AWS. This role is built for a cloud-native security professional, not a traditional network engineer, who has hands-on experience migrating servers, firewalls, VPNs, and load balancers into AWS and re-architecting them using AWS-native services. The ideal candidate has already led this exact type of migration and can speak directly to the tradeoffs, architecture decisions, and security posture required to do it at scale.

Job Description:

Cloud Security Engineer AWS Infrastructure & Migration

We are seeking an experienced Cloud Security Engineer (10 years minimum) with a proven track record leading the migration of on-premises network infrastructure into AWS. This role is built for a cloud-native security professional, not a traditional network engineer, who has hands-on experience migrating servers, firewalls, VPNs, and load balancers into AWS and re-architecting them using AWS-native services. The ideal candidate has already led this exact type of migration and can speak directly to the tradeoffs, architecture decisions, and security posture required to do it at scale.

Core Focus: AWS Migration & Cloud Security

• Lead end-to-end migration of on-prem network infrastructure (firewalls, VPNs, servers) into AWS, replacing legacy hardware with cloud-native equivalents
• Architect AWS networking: VPCs, subnets, routing, Transit Gateway, VPN connections, and hybrid connectivity between on-prem and cloud environments
• Deploy and manage AWS security services including Security Groups, Network Firewall, WAF, Shield, GuardDuty, and IAM
• Implement AWS load balancing (ALB, ELB, Gateway Load Balancer) and CloudWatch observability for migrated infrastructure
• Own cloud security posture across AWS environments, ensuring compliance with SOX, PCI, and other cybersecurity frameworks
• Lead incident response and forensic investigations for cloud-based security events

Technical Requirements

• 5+ years working within AWS, with direct ownership of cloud security architecture
• Proven experience migrating on-prem network infrastructure (firewalls, VPNs, servers) into AWS, approached from the cloud side
• Proficiency in Infrastructure-as-Code: Terraform, Ansible, and Python automation
• Familiarity with CI/CD pipelines and GitHub workflows
• Working knowledge of Palo Alto or equivalent firewall technology, as it maps to cloud firewall concepts
• Comfortable in Linux/RHEL environments and command-line troubleshooting
• GCP experience a plus