AWS Dev SecOps

HIGH BRIDGE CONSULTING LLC

8h • $110,000 - $160,000 • Remote

About The Position

We are looking for strong AWS DevSecOps / Cloud Security Engineers to join our client's team as full-time employees. The role focuses on AWS cloud security, governance, policy automation, and Infrastructure-as-Code across a large multi-account AWS environment. This is a remote position.

Requirements

• Strong hands-on AWS DevSecOps / Cloud Security experience.
• Experience with AWS Organizations and multi-account AWS environments.
• Hands-on experience with SCPs and IAM policies; RCP experience is strongly preferred.
• Strong Terraform / Infrastructure-as-Code experience.
• Experience with AWS security controls, IAM, S3, KMS, and VPC.
• Ability to design, test, troubleshoot, and safely roll out cloud security policies.

Nice To Haves

• Experience with AWS Control Tower / Account Factory for Terraform (AFT).
• Experience with IAM Access Analyzer.
• AWS Certified Security – Specialty certification.
• Experience supporting enterprise-scale AWS environments.
• Experience with security automation, governance, runbooks, and knowledge transfer.

Responsibilities

• Design, author, test, and deploy AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).
• Implement cloud security controls using Terraform and Infrastructure-as-Code.
• Work with AWS Organizations, organizational units (OUs), and Control Tower/Account Factory for Terraform (AFT) in a multi-account environment.
• Develop and manage IAM policies, IAM Access Analyzer, VPC endpoint policies, and resource-based policies.
• Protect critical AWS resources, including S3, KMS, logging, and other security-sensitive services.
• Test policies in sandbox environments, assess blast radius, and support phased production rollouts.
• Develop security runbooks and provide knowledge transfer to engineering and operations teams.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed