AWS DevSecOps

This is a fully remote position, open to applicants in United States.

📋 Description

• Create, write, test, and implement AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).

• Establish cloud security measures utilizing Terraform / Infrastructure-as-Code.

• Collaborate with AWS Organizations, Organizational Units (OUs), and Control Tower/AFT within a multi-account setup.

• Design and oversee IAM policies, utilize IAM Access Analyzer, and manage VPC endpoint policies and resource-based policies.

• Safeguard essential AWS resources such as S3, KMS, logging, and other security-critical services.

• Evaluate policies in sandbox environments, analyze blast radius, and assist in phased production deployments.

• Create security runbooks and facilitate knowledge transfer to engineering and operations teams.

⛳️ Requirements

• Extensive hands-on experience in AWS DevSecOps / Cloud Security.

• Proficient with AWS Organizations and multi-account AWS setups.

• Practical experience with SCPs and IAM policies; RCP experience is highly desirable.

• Strong background in Terraform / Infrastructure-as-Code.

• Familiarity with AWS security mechanisms, IAM, S3, KMS, and VPC.

• Capability to design, test, troubleshoot, and safely implement cloud security policies.

• Preference for AWS Control Tower / Account Factory for Terraform (AFT) experience.

• Familiarity with IAM Access Analyzer is preferred.

• AWS Certified Security – Specialty is preferred.

• Experience in supporting enterprise-level AWS environments is preferred.

• Background in security automation, governance, runbooks, and knowledge transfer is preferred.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and certifications.

• Flexible working hours and remote work options.

• Supportive team culture and collaborative work environment.