AWS Cloud Security Infrastructure Engineer

abra•Wheaton, IL

About The Position

abra is seeking an experienced AWS Cloud Security Infrastructure Engineer to secure and maintain infrastructure in a large-scale, complex cloud environment. The role combines cloud security, infrastructure engineering, networking, and automation, with hands-on work across multi-account AWS environments. The engineer will implement security controls, manage identities and permissions, and participate in cloud projects from planning and design through implementation and ongoing operations. The position is based in the Ben Gurion Airport Area.

Requirements

At least 3 years of experience in Information Security, or relevant academic/professional training combined with the required security experience.
At least 2 years of hands-on Information Security experience in an organization with 1,000+ users.
At least 2 years of experience within the last 5 years in Cloud Security, DevOps, or Cloud Infrastructure Engineering.
At least 2 years of hands-on experience with AWS, including multi-account environments.
At least 2 years of experience with cloud security architecture and AWS security services such as IAM, KMS, GuardDuty, Security Hub, WAF, and CloudTrail, or equivalent technologies.
At least 2 years of hands-on experience with Terraform or equivalent IaC technologies, including writing and maintaining infrastructure code.
Experience with cloud identity and permission models, including resource policies, cross-account trust, permission boundaries, and privilege escalation paths.
Experience migrating infrastructure from on-premises environments to AWS.
Experience implementing cloud security controls in at least 3 areas, such as IAM, secrets/key management, service hardening, organizational policies, logging and visibility, and automated response.
At least 2 years of experience with cloud networking and communication protocols, including VPC, Security Groups, routing, and external exposure.
Strong understanding of networking concepts and troubleshooting, including the OSI model, routing protocols, subnetting, and routing priorities.
Knowledge of Windows and Linux environments.
Native-level Hebrew and strong English communication skills.

Nice To Haves

3 years of experience building or expanding AWS Landing Zones or multi-account AWS environments.
Hands-on experience with Firewalls, SASE, NAC, IPSEC, and VPN technologies.
3 years of scripting and automation experience using Python, Bash, or similar technologies.
AWS professional certification such as AWS Certified Security – Specialty, Solutions Architect – Professional, or DevOps Engineer – Professional.

Responsibilities

Operate, maintain, implement, and troubleshoot cloud security systems and infrastructure.
Implement security controls and secure configurations across AWS services and infrastructure.
Work with AWS native security services, including IAM, KMS, GuardDuty, Security Hub, WAF, and CloudTrail.
Manage cloud identities, permissions, resource policies, cross-account access, and privilege controls.
Develop and maintain security infrastructure and controls as code using Terraform or equivalent IaC technologies.
Implement security controls across IAM, secrets and key management, service hardening, logging and visibility, and security automation.
Work with AWS networking components, including VPCs, Security Groups, routing, subnetting, and external connectivity.
Support cloud migration projects from on-premises environments to AWS.
Participate in projects from planning and design through implementation and production.
Troubleshoot complex cloud security, networking, and infrastructure issues.
Create and maintain technical documentation and operational procedures.