AWS Cloud Analyst/Developer

Elyon International•Seattle, WA

About The Position

The AWS Cloud Analyst/Developer evaluates Amazon Web Services (AWS) to define, document, develop/code, and implement security controls. This role bridges the gap between architectural analysis and technical enforcement by developing Policy as Code (PaC) to ensure services meet enterprise standards. The analyst/developer manages the full service-enablement lifecycle, collaborating with threat modelers and governance boards to facilitate secure cloud adoption.

Requirements

Expertise in Python, JSON, and Terraform for cloud security control automation.
Knowledge of various automated control types: Preventative, Proactive, Detective, Reactive, etc., and AWS Service Control Policies.
Experience with Git repository management and CI/CD (Continuous Integration/Continuous Deployment) concepts.
Strong understanding of AWS Cloud Architecture and core service security (e.g., IAM, VPC, KMS).
Experience presenting technical analysis to expert panels or formal committees.
Must be a US Citizen

Nice To Haves

AWS certifications (e.g., Solutions Architect Professional or Security Specialty).
Experience developing custom AWS security controls.
Experience in Governance, Risk, and Compliance (GRC) or PaC frameworks.
Background in formal threat modeling methodologies (e.g., STRIDE).

Responsibilities

Evaluate AWS services to identify security requirements and document them in standard service enablement workbooks.
Present service enablement workbooks to the Cloud Standards Board (CSB) for review. Address expert panel inquiries to secure service approval, information requests, or risk escalations.
Collaborate with threat modelers to identify risks for specific AWS services. Present findings to the Threat Model Review (TMR) board and integrate identified mitigations into the final service control set.
Write/develop code for automated controls to secure AWS services. Code control, response and remediation scripts using Python and Terraform. Build Infrastructure as Code (IaC) modules to deploy approved controls across AWS commercial and government landing zones, some of which are connected to the enterprise network (internal), and some of which are isolated from the enterprise network (external).
Manage all control logic, configuration files, and documentation within Git repositories, following standard branching and pull request workflows.
Coordinate with the CSB core team and the PaC team to align automated enforcement with organizational policy and validation standards.
Serve as a Subject Matter Expert (SME) for internal teams regarding AWS architecture and service capabilities.
Perform ad hoc technical research to resolve complex queries about emerging cloud features.