Description

Design secure AWS multi-account patterns and build policy-as-code libraries that engineering teams adopt.

This role is remote.

Responsibilities

• Design AWS multi-account, organization, and guardrail patterns that make the secure path the easy one.
• Build and own a library of Terraform modules and policy-as-code adopted across the company.
• Implement preventive controls including SCPs, deployment-time policy validation, and drift detection for high-risk actions.
• Build logging integrity and tamper resistance into CloudTrail and telemetry pipelines for downstream detection.
• Partner with Platform and Architecture on identity, networking, EKS, and serverless patterns.

Required Skills

• 8+ years across software engineering, platform engineering, SRE, or cloud security.
• Substantial hands-on AWS work in multi-account environments.
• Production-quality code in at least one of Go, Python, TypeScript, C#, or Java.
• Deep Terraform experience with reusable modules, tested patterns, and scalable IaC structuring.
• Hands-on experience with policy-as-code, preventive guardrails, and securing EKS and serverless workloads.
• Experience building detective and preventive controls for cloud control planes and logging integrity.
• Comfort working through pull requests and design reviews with engineering teams.

Preferred Skills

• Bachelor's degree in Computer Science or related field.
• Experience with Go, Python, TypeScript, C#, or Java.

Key Skills

Education

Bachelor's degree