Cloud Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and manage security capabilities for multi-account AWS environments, focusing on logging, compliance with configurations, threat detection, vulnerability visibility, network security, encryption, and data protection.

• Create and sustain Terraform, AWS CloudFormation, scripts, modules, policies, and automated workflows to ensure secure infrastructure provisioning and ongoing validation of security controls.

• Establish and enhance secure infrastructure delivery pipelines that incorporate security testing, policy checks, approval processes, separation of duties, artifact integrity, and controlled promotion.

• Develop and uphold secure, scalable, and resilient infrastructure patterns across AWS and hybrid integrations.

• Automate the identification, prioritization, tracking, and remediation of infrastructure vulnerabilities, insecure configurations, and control gaps.

• Integrate security controls across on-premises environments, AWS infrastructure, and relevant SaaS services.

• Assist in network segmentation, security group management, firewall integration, DDoS-resilient designs, secure connectivity, and infrastructure protection patterns.

• Enhance infrastructure telemetry, alerting, and operational responses using AWS and enterprise monitoring platforms.

• Engage in security and infrastructure incidents, conducting root-cause analysis, containment, recovery, and automation of corrective actions.

• Collaborate with Cybersecurity to implement PCI DSS and other relevant technical controls, validation methods, documentation, and audit evidence.

• Monitor the health of the infrastructure, security posture, reliability, and effectiveness of controls.

• Participate in lifecycle management, change management, problem management, operational readiness, and the team's 7x24 on-call rotation.

• Contribute to design reviews, technical documentation, and knowledge dissemination.

• Assess AWS services and industry standards, pilot improvements within approved guidelines, and reduce manual tasks through automation.

⛳️ Requirements

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field, or equivalent professional experience.

• A minimum of three years of experience in cloud engineering, infrastructure engineering, DevOps, DevSecOps, cloud security engineering, or similar technical roles.

• Practical experience in deploying, securing, and managing AWS infrastructure in production or regulated hybrid environments.

• Proven experience in implementing or enhancing security controls within production cloud or hybrid infrastructures.

• Expertise in Infrastructure as Code, preferably with Terraform, including reusable modules, automated testing, policy validation, and controlled deployment practices.

• Hands-on experience with CI/CD platforms and source control tools, such as GitLab CI/CD, Jenkins, GitHub Actions, or AWS-native delivery services.

• Strong skills in scripting or software automation using Python, Bash, PowerShell, or a similar language.

• Experience with multi-account AWS environments, identity and access management, logging and monitoring, compliance with configurations, vulnerability management, encryption, data protection, and network security.

• Background in participating in infrastructure or security incident responses, root-cause analysis, and implementation of corrective actions.

• Familiarity with security and compliance practices in regulated industries.

• PCI DSS experience is preferred.

• AWS certifications are preferred; however, equivalent hands-on experience will be taken into account.

• Preferred certification paths include AWS Certified Security – Specialty and AWS Certified Solutions Architect – Associate or AWS Certified CloudOps Engineer – Associate.

• Additional desired qualifications include AWS Certified DevOps Engineer – Professional, AWS Certified Solutions Architect – Professional, and AWS Certified AI Practitioner or equivalent experience.

🏝️ Benefits

• 7x24 on-call rotation.

• AWS certifications are preferred; equivalent hands-on experience will be considered.