AWS Cloud Engineer

AWS Cloud Engineer

Insight Global is seeking an experienced AWS Cloud Engineer to join a Security Green Team, translating vulnerability and misconfiguration findings into durable, automated remediation embedded into how cloud infrastructure is built and maintained. Moving beyond reactive, manual patching, this hands-on engineer will own the remediation pipeline for the AWS estate and codifying fixes as infrastructure as code, automating patch and image lifecycle management, hardening baselines against CIS benchmarks, and enforcing policy-as-code guardrails.

Architects set strategic direction; the engineer executes against it, bringing the AWS depth needed to harden an environment where internal AWS experience is currently limited.

Key Responsibilities:

• Assess the current AWS and broader cloud environment to identify hardening and configuration gaps.
• Validate that guardrails are in place and meet CIS benchmarks across the AWS estate.
• Design and implement policy enforcement and guardrails across AWS via policy-as-code and continuous compliance scanning.
• Codify fixes and standards as Infrastructure as Code (Terraform) so misconfigurations do not reappear downstream.
• Build and harden CI/CD pipelines with development teams, integrating security and policy gates.
• Prepare the environment for forthcoming container and Kubernetes workloads as the Kubernetes platform team engages.
• Coordinate server patching and lifecycle management with the platform and Linux teams.
• Maintain dashboards and reporting on security posture, remediation velocity, and cloud risk.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to  To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy.

Skills and Requirements:

• 5-10 years of hands-on cloud engineering, with deep expertise in Amazon Web Services (AWS).
• Proven experience hardening cloud environments to CIS Benchmarks for AWS.
• Track record establishing policies and guardrails across a hyperscaler (Service Control Policies, policy-as-code, continuous compliance).
• Strong CI/CD command, building and hardening pipelines in partnership with development teams.
• Advanced automation and Infrastructure as Code, primarily Terraform.
• AWS Systems Manager Patch Manager, coordinating server patching with the platform team.
• AWS identity and security services: IAM, security groups, KMS/Secrets Manager, logging and monitoring.
• Proficiency in Python and Bash for automation and reporting.
  
  - Ansible for configuration management and patch orchestration.
• Hyperscaler certifications (AWS, Google Cloud, and/or Azure).
• Hashi Corp Terraform Associate or equivalent IaC certification.
• CSPM and vulnerability tooling (Security Command Center, Security Hub, Wiz, Prisma Cloud, Tenable, or Qualys).
• Container and image scanning (Trivy, Aqua, Artifact Registry / ECR) and Kubernetes hardening.
• Knowledge of the security "color wheel" model and Green / Purple Team frameworks.