Responsibilities and Duties
Cloud & Network Security
Design and implement security controls for AWS multi-account and hybrid-cloud environments.
Deploy and manage AWS security capabilities, including Network Firewall, WAF, Shield, Security Groups/NACLs, GuardDuty, Security Hub, CloudTrail, Config, IAM/Identity Center, KMS, VPC, and Transit Gateway controls.
Design secure connectivity, segmentation, and security boundaries between AWS and on-premises environments.
Security Architecture & Automation
Develop secure, resilient architectures spanning AWS and on-premises infrastructure using defense-in-depth and Zero Trust principles.
Modernize environment to leverage Infrastructure as Code using technologies such as Terraform.
Automate security operations, compliance reporting, configuration management, and policy enforcement using APIs, scripting, DevSecOps tooling, and AI-assisted engineering tools.
Support security controls and evidence mapping aligned with frameworks such as NIST 800-53/800-171, FedRAMP, and FISMA.
Evaluate existing security architectures and identify improvements in security, resiliency, scalability, performance, and operational efficiency.
Operations & Incident Response
Troubleshoot complex cloud, network, firewall, and application-connectivity issues.
Support security incidents, production outages, and root-cause analysis.
Develop monitoring, logging, alerting, dashboards, runbooks, and engineering standards.
Perform performance tuning, capacity planning, and security infrastructure lifecycle management.
Participate in on-call or escalation support as required.
Required Qualifications
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or equivalent professional experience.
5+ years of hands-on cloud security engineering experience.
Demonstrated experience designing, deploying, managing, and troubleshooting AWS security services.
Experience securing hybrid on-premises/AWS environments.
