Description

You will own security automation for AWS delivery, building secure-by-default infrastructure and enforcing compliance within CI/CD pipelines.

This role is hybrid.

Responsibilities

• Author and maintain AWS CDK constructs and CloudFormation templates, providing Terraform equivalents where required.
• Implement pipeline security templates in GitHub Actions and Azure DevOps with SAST, SCA, IaC, and secret scanning gates.
• Configure AWS Config conformance, Security Hub standards, and GuardDuty routing in reference accounts.
• Generate posture and evidence reports mapped to CJIS and NIST 800-53 controls for auditors.
• Coach pilot teams to adopt reference guardrails and raise enterprise-wide enforcement gaps.

Required Skills

• 5+ years of AWS security automation and DevOps experience.
• Strong proficiency in AWS CDK and CloudFormation.
• Working proficiency in Terraform.
• CI/CD authoring in GitHub Actions and Azure DevOps.
• Proficient in Python and Bash, with PowerShell for Windows automation.
• Ability to read Java and C# to integrate and tune SAST/SCA tools.
• Practical knowledge of CJIS and NIST 800-53 control families.

Preferred Skills

• Experience with OPA/Conftest, Checkov, Trivy, Inspector, or CodeQL.
• Familiarity with EKS/ECS/Lambda hardening patterns.

Key Skills

Education

Any Gradute