Description

You design and implement secure AWS cloud architectures, own the security strategy, and guide engineering teams on compliance and risk mitigation.

This role is on-site.

Responsibilities

• Design and maintain secure AWS architectures using IAM, encryption, and network controls.
• Lead security strategy execution and provide technical guidance to engineering, operations, and DevOps teams.
• Perform cloud security risk assessments and implement mitigation strategies.
• Use AWS security tools (Shield, WAF, GuardDuty, Security Hub) to enforce policies and detect incidents.
• Manage incident response, conduct root cause analysis, and guide post-incident remediation.

Required Skills

• 15+ years of IT security experience with 10+ years securing AWS infrastructure.
• AWS Certified Security – Specialty certification (CISSP or CISM accepted).
• Expertise in AWS architecture, security services, and compliance (NIST, HIPAA, IRS, SSA).
• Proficiency with Terraform or AWS CloudFormation for infrastructure as code.
• Strong scripting skills in Python, Bash, or PowerShell.
• Experience with containerization and serverless technologies (Docker, Kubernetes, AWS Lambda).
• Bachelor’s or Master’s degree in Computer Science, Information Security, or Engineering.

Preferred Skills

• Knowledge of threat hunting and penetration testing in AWS.

Key Skills

Education

Bachelor’s or Master’s degree