We are looking for
strong AWS DevSecOps / Cloud Security Engineers to join our clients team as
Full-Time Employees. The role focuses on AWS cloud security, governance, policy automation, and Infrastructure-as-Code across a large multi-account AWS environment.
Key Responsibilities- Design, author, test, and deploy AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).
- Implement cloud security controls using Terraform / Infrastructure-as-Code.
- Work with AWS Organizations, OUs, and Control Tower/AFT in a multi-account environment.
- Develop and manage IAM policies, IAM Access Analyzer, VPC endpoint policies, and resource-based policies.
- Protect critical AWS resources including S3, KMS, logging, and other security-sensitive services.
- Test policies in sandbox environments, assess blast radius, and support phased production rollouts.
- Develop security runbooks and provide knowledge transfer to engineering/operations teams.
Required- Strong hands-on AWS DevSecOps / Cloud Security experience.
- Experience with AWS Organizations and multi-account AWS environments.
- Hands-on experience with SCPs and IAM policies; RCP experience strongly preferred.
- Strong Terraform / IaC experience.
- Experience with AWS security controls, IAM, S3, KMS and VPC.
- Ability to design, test, troubleshoot, and safely roll out cloud security policies.
Preferred- AWS Control Tower / Account Factory for Terraform (AFT).
- IAM Access Analyzer.
- AWS Certified Security - Specialty.
- Experience supporting enterprise-scale AWS environments.
- Experience with security automation, governance, runbooks, and knowledge transfer.
Technology EnvironmentAWS | AWS Organizations | Control Tower/AFT | Terraform | IAM | IAM Access Analyzer | S3 | KMS | VPCThis is a remote position.
Compensation: $110,000.00 - $160,000.00 per year
