Cloud Security Engineer - Infrastructure - AWS

We are looking for an experienced Cloud Security Engineer to strengthen the security of enterprise cloud infrastructure and AWS environments. In this hands-on role, you will design, implement, and maintain security controls that protect critical systems while enabling engineering teams to innovate efficiently. You will collaborate with Site Reliability Engineering, Platform Engineering, DevOps, Infrastructure, and application development teams to embed security throughout the development lifecycle. From identity and access management to network protection, encryption, and automated compliance, you will help establish secure-by-default architectures. You will also drive Infrastructure-as-Code security practices, improve threat detection capabilities, and develop scalable safeguards that reduce operational risk. This remote opportunity is ideal for a seasoned security professional who enjoys solving complex technical challenges and shaping enterprise security standards.

• Education and Experience: Bachelor's degree in a technical discipline or equivalent professional experience, with at least eight years of relevant industry experience. Candidates should have seven or more years of direct experience in cloud security engineering, application or product security, or a comparable discipline, alongside at least five years in cloud engineering, infrastructure engineering, DevSecOps, SRE, or related technical fields.

• AWS Security Expertise: Extensive hands-on experience securing production AWS environments, including IAM policies, roles, trust relationships, permission boundaries, identity federation, cross-account access, and least-privilege design.

• Cloud Networking: Strong understanding of AWS networking and core network security concepts, including VPCs, subnets, routing, security groups, network ACLs, VPC endpoints, load balancers, DNS, TCP/IP, TLS, firewalls, proxies, and network segmentation.

• AWS Security Services: Practical experience with tools such as CloudTrail, AWS Config, GuardDuty, Security Hub, Inspector, IAM Access Analyzer, Key Management Service (KMS), and Secrets Manager.

• Infrastructure Engineering and Automation: Demonstrated proficiency with Infrastructure-as-Code technologies such as Terraform or CloudFormation, Git-based development, CI/CD workflows, and scripting languages including Python, PowerShell, or Bash.

• Containers and Operating Systems: Experience securing Kubernetes and containerized environments, including Amazon EKS or comparable managed Kubernetes platforms, alongside working knowledge of Linux and common infrastructure technologies.

• Threat Detection and Risk Management: Understanding of cloud attack techniques, identity-based attacks, privilege escalation, credential compromise, infrastructure vulnerabilities, encryption, key management, compliance, and security risk management.

• Technical Leadership and Problem-Solving: Ability to troubleshoot complex infrastructure and security issues independently, evaluate risks, prioritize remediation, and manage multiple deliverables in a fast-paced environment.

• Communication and Collaboration: Strong written and verbal communication skills, sound analytical judgment, and the ability to work effectively with technical teams and senior stakeholders.

• Preferred Qualifications: Relevant security certifications such as CISSP, CEH, GIAC, ISSAP, or CISM are advantageous. Experience at a senior technical or equivalent leadership level is also valued.