Description

You will manage and secure AWS account environments while automating security detection and response mechanisms.

This role is remote.

Responsibilities

• Configure AWS network environments including VPCs, subnets, internet gateways, NAT gateways, security groups, NACLs, and virtual gateways.
• Validate security controls against SCP bypass attempts, privilege escalation via resource tagging, and public resource deployments.
• Automate detection and alerting mechanisms using Lambda, Step Functions, and EventBridge.
• Support security and cloud teams in assessing configuration changes and investigating vulnerabilities via AWS-native monitoring.
• Maintain runbooks and operational documentation for secure, scalable configurations.

Required Skills

• 8+ years of experience in DevOps or Cloud Engineering.
• Deep knowledge of AWS networking: VPC, Security Groups, NACLs, and Internet Gateways.
• Proficiency with AWS CloudTrail and CloudWatch for logging, alarms, and insights.
• Hands-on experience with AWS Lambda, Step Functions, and EventBridge.
• Strong understanding of AWS Organizations and Service Control Policies (SCPs).
• Experience implementing WAF policies and network security controls.
• Proven ability to troubleshoot complex cloud environments.
• Experience with automated monitoring and alerting solutions.

Preferred Skills

• Any Graduate degree.

Key Skills

Education

Any Gradute