AWS Cloud Security Engineer

Organizations are expanding their use of AWS, but securing a large cloud environment requires more than deploying individual security tools. As an AWS cloud security engineer, you know how to assess how services are being used, establish secure configuration standards, build preventive guardrails, automate controls, and help engineering teams operate cloud environments consistently and securely. As an AWS Cloud Security Engineer on our team, you’ll support a hands‑on AWS cloud security assessment and engineering program for a large enterprise environment.

You’ll help review AWS Organizations, accounts, landing zones, identity, networking, security services, workloads, policies, Infrastructure as Code, and existing security tooling to identify gaps and opportunities to strengthen the client’s cloud security posture. You’ll work with AWS Organizations, IAM, IAM Identity Center, Service Control Policies, VPC networking, Cloud Trail, Config, Guard Duty, Security Hub, KMS, Systems Manager, and other AWS‑native services.

You’ll assist in establishing minimum secure configuration baselines for AWS services, developing reusable Terraform and Infrastructure as Code, creating security policies and guardrails, evaluating existing cloud security tooling, and developing implementation‑ready technical documentation. This is an opportunity to combine practical AWS engineering with cloud security architecture, automation, and client delivery. You’ll work alongside experienced cloud architects and security engineers while collaborating directly with cloud platform teams, security stakeholders, application owners, governance teams, and client leadership.

You’ll support work that includes AWS security assessments, landing zone reviews, identity and access management, network security, Secure copy protocol (SCP) development, secure service baselines, Infrastructure as Code, security automation, application architecture reviews, tooling optimization, and cloud governance. Your ability to translate technical requirements into scalable, repeatable engineering solutions will help clients strengthen cloud security while enabling continued adoption of AWS.

Join us. The world can’t wait.

• 3+ years of experience with AWS cloud engineering, cloud security, infrastructure engineering, Dev Sec Ops , site reliability engineering, or enterprise cloud delivery
• Experience with AWS Organizations, organizational units, multi‑account environments, IAM, roles, policies, Service Control Policies, or cross‑account access
• Experience with AWS networking, including VPCs, subnets, security groups, routing, Transit Gateway, private connectivity, DNS, load balancing, or ingress and egress controls
• Experience with AWS security and monitoring services, including Cloud Trail, AWS Config, Guard Duty, Security Hub, KMS, IAM Access Analyzer, Cloud Watch, Systems Manager, or AWS Inspector
• Experience developing or reviewing Terraform, AWS Cloud Formation, or Infrastructure as Code used to deploy and manage AWS resources
• Experience in assisting with developing cloud security standards, secure configuration baselines, technical guardrails, policies, or reusable security patterns
• Experience with scripting or automation using Python, Bash, Power Shell, AWS CLI, SDKs, APIs, or engineering tools
• Experience assessing technical environments, identifying security or architecture gaps, and translating findings into practical recommendations, implementation steps, or technical documentation
• Ability to work directly with cloud engineers, architects, cybersecurity teams, application teams, governance stakeholders, and client leadership
• Bachelor’s degree in Computer Science, Cybersecurity, Information…