Cloud Security Engineer – Infrastructure

This is a fully remote position, open to applicants in New York, +3 more states.

📋 Description

• Design and implement least-privilege IAM architectures, network segmentation, and cloud security controls (SCPs, secrets management, encryption, runtime threat detection) across various AWS accounts.

• Create automated detection and response pipelines, utilizing AI tools to transform security findings into prompt, actionable remediation.

• Manage GitHub-based CI/CD pipelines and automation frameworks in collaboration with the engineering team.

• Drive cross-functional security initiatives, integrating threat modeling and security evaluations into the architecture and development lifecycle.

• Oversee vulnerability management, AWS security posture monitoring, incident detection and response, and HIPAA compliance programs.

• Influence cloud architecture decisions by balancing security, cost, and reliability in accordance with zero-trust and defense-in-depth principles.

• Review and document workflows, staffing, and tools for each active care program, providing a written summary of gaps and immediate priorities.

⛳️ Requirements

• 5+ years of practical experience in AWS cloud security and infrastructure engineering (IAM, network security, threat detection, compliance) in a production environment — preferably including the establishment of a security program from the ground up.

• Strong proficiency with AWS security services (GuardDuty, Security Hub, Config, CloudTrail, KMS, Inspector) and IAM policy design.

• Experience with multi-account AWS governance (Control Tower, Organizations, VPC/network design) and container/serverless infrastructure (ECS, EKS, Lambda).

• Knowledge of security frameworks and compliance standards (CIS, HIPAA, HITRUST, AWS Well-Architected).

• US Citizenship is mandatory.

🏝️ Benefits

• Remote opportunity with the flexibility to work during ET or CT hours.

• Authorization to work in the US without sponsorship is required.

• Occasional travel to practice sites or Chamber offices may be necessary.