Description

Design and enforce secure AWS multi-account patterns, owning the release pipeline and infrastructure-as-code standards.

This role is remote.

Responsibilities

• Build and maintain a library of Terraform modules and policy-as-code for cross-company adoption.
• Implement preventive controls including SCPs, deployment-time validation, and drift detection.
• Establish logging integrity and tamper resistance for CloudTrail and telemetry pipelines.
• Partner with Platform and Architecture teams on identity, networking, EKS, and serverless patterns.
• Create visible design docs and reference implementations for security best practices.

Required Skills

• 8+ years in software engineering, platform engineering, SRE, or cloud security.
• Substantial hands-on AWS experience in multi-account environments.
• Production-quality coding in Go, Python, TypeScript, C#, or Java.
• Deep Terraform expertise: reusable modules, tested patterns, and scalable IaC structure.
• Experience with policy-as-code, preventive guardrails, and securing EKS/serverless workloads.
• Ability to build detective and preventive controls for cloud control planes.
• Strong communication skills for working through pull requests and design reviews with engineering teams.

Preferred Skills

• Experience building tamper-resistant telemetry pipelines.
• Background in security operations and detection engineering.

Key Skills

Education

Any Graduate