Cloud Security Engineer - Infrastructure - AWS

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities

• Cloud Security Engineering: Design, implement, and maintain AWS security controls covering identity and access management, networking, encryption, monitoring, and cloud-native services. Apply least-privilege principles and establish secure configurations across production environments.

• Infrastructure and Platform Security: Partner with infrastructure, platform, SRE, DevOps, and application teams to integrate security into enterprise platforms. Define secure baselines, hardening standards, reusable guardrails, and preventative controls to strengthen infrastructure resilience.

• Infrastructure-as-Code and DevSecOps: Develop and maintain security controls using Terraform, CloudFormation, reusable modules, and templates. Integrate automated policy enforcement, vulnerability scanning, configuration validation, and compliance checks into CI/CD pipelines.

• Cloud Monitoring and Incident Response: Improve the collection, protection, and centralization of cloud security telemetry. Collaborate with Security Operations teams to investigate incidents, strengthen threat detection, and develop automated remediation capabilities.

• Security Architecture and Risk Management: Conduct architecture reviews, identify vulnerabilities, and translate risk assessments into practical technical safeguards. Develop reference architectures, security patterns, engineering standards, and implementation guidance.

• Automation and Continuous Improvement: Use scripting and automation to streamline security operations, reduce manual intervention, and improve control effectiveness. Investigate complex technical issues and implement sustainable solutions across cloud and infrastructure environments.

• Cross-Functional Collaboration: Communicate security risks, business implications, and remediation recommendations to engineers, architects, security specialists, and technology leaders. Manage multiple technical deliverables independently while contributing to shared security objectives.

Requirements

• Education and Experience: Bachelor's degree in a technical discipline or equivalent professional experience, with at least eight years of relevant industry experience. Candidates should have seven or more years of direct experience in cloud security engineering, application or product security, or a comparable discipline, alongside at least five years in cloud engineering, infrastructure engineering, DevSecOps, SRE, or related technical fields.

• AWS Security Expertise: Extensive hands-on experience securing production AWS environments, including IAM policies, roles, trust relationships, permission boundaries, identity federation, cross-account access, and least-privilege design.

• Cloud Networking: Strong understanding of AWS networking and core network security concepts, including VPCs, subnets, routing, security groups, network ACLs, VPC endpoints, load balancers, DNS, TCP/IP, TLS, firewalls, proxies, and network segmentation.

• AWS Security Services: Practical experience with tools such as CloudTrail, AWS Config, GuardDuty, Security Hub, Inspector, IAM Access Analyzer, Key Management Service (KMS), and Secrets Manager.

• Infrastructure Engineering and Automation: Demonstrated proficiency with Infrastructure-as-Code technologies such as Terraform or CloudFormation, Git-based development, CI/CD workflows, and scripting languages including Python, PowerShell, or Bash.

• Containers and Operating Systems: Experience securing Kubernetes and containerized environments, including Amazon EKS or comparable managed Kubernetes platforms, alongside working knowledge of Linux and common infrastructure technologies.

• Threat Detection and Risk Management: Understanding of cloud attack techniques, identity-based attacks, privilege escalation, credential compromise, infrastructure vulnerabilities, encryption, key management, compliance, and security risk management.

• Technical Leadership and Problem-Solving: Ability to troubleshoot complex infrastructure and security issues independently, evaluate risks, prioritize remediation, and manage multiple deliverables in a fast-paced environment.

• Communication and Collaboration: Strong written and verbal communication skills, sound analytical judgment, and the ability to work effectively with technical teams and senior stakeholders.

• Preferred Qualifications: Relevant security certifications such as CISSP, CEH, GIAC, ISSAP, or CISM are advantageous. Experience at a senior technical or equivalent leadership level is also valued.

Benefits

• Salary: Annual base salary ranging from $135,000 to $180,000, depending on qualifications, relevant experience, skills, geographic location, and market conditions.

• Bonus Opportunities: Potential eligibility for a discretionary bonus, subject to applicable program guidelines, position eligibility, and management approval.

• Remote Work: Fully remote position, offering flexibility to work from a location within the United States.

• Healthcare Coverage: Access to medical, dental, and vision insurance plans.

• Financial Protection: Life insurance and disability insurance benefits.

• Retirement Planning: Eligibility to participate in a 401(k) retirement savings plan.

• Paid Time Off: Paid vacation and holidays, subject to the applicable company policies.

• Professional Growth: Opportunities to work with modern cloud technologies, strengthen enterprise security capabilities, and collaborate with experienced professionals across engineering and security disciplines.

• Inclusive Workplace: Equal employment opportunities, with consideration based on relevant qualifications and experience.