AWS Dev SecOps

We are looking for

strong AWS DevSecOps / Cloud Security Engineers

to join our clients team as

Full-Time Employees

. The role focuses on AWS cloud security, governance, policy automation, and Infrastructure-as-Code across a large multi-account AWS environment.
Key Responsibilities

Design, author, test, and deploy

AWS Service Control Policies (SCPs)

and

Resource Control Policies (RCPs)

.
Implement cloud security controls using

Terraform / Infrastructure-as-Code

.
Work with

AWS Organizations, OUs, and Control Tower/AFT

in a multi-account environment.
Develop and manage

IAM policies, IAM Access Analyzer, VPC endpoint policies, and resource-based policies

.
Protect critical AWS resources including

S3, KMS, logging, and other security-sensitive services

.
Test policies in sandbox environments, assess

blast radius

, and support phased production rollouts.
Develop security runbooks and provide knowledge transfer to engineering/operations teams.
Required
Strong hands-on

AWS DevSecOps / Cloud Security

experience.
Experience with

AWS Organizations and multi-account AWS environments

.
Hands-on experience with

SCPs and IAM policies

; RCP experience strongly preferred.
Strong

Terraform / IaC

experience.
Experience with

AWS security controls, IAM, S3, KMS and VPC

.
Ability to design, test, troubleshoot, and safely roll out cloud security policies.
Preferred
AWS Control Tower / Account Factory for Terraform (AFT)

.
IAM Access Analyzer

.
AWS Certified Security – Specialty.
Experience supporting enterprise-scale AWS environments.
Experience with security automation, governance, runbooks, and knowledge transfer.
Technology Environment
AWS | AWS Organizations | Control Tower/AFT | Terraform | IAM | IAM Access Analyzer | S3 | KMS | VPC
This is a remote position.