AWS Cloud Security Engineer: Automation & Compliance

CareCone Group; Melbourne; On-site; AUD 110,000 - 160,000; Full time

Job summary

CareCone Group is seeking a security-focused AWS specialist in Melbourne to design and implement multi-account guardrails and governance. You will work on IAM, permission boundaries, and automated controls using Python/PowerShell, Config, CloudTrail, and policy-as-code tools.

You will collaborate with CI/CD pipelines to enforce security/compliance and build remediation workflows across AWS environments.

Qualifications

• Scripting and automation are required to implement guardrails across AWS environments.
• Strong understanding of IAM and access control models is essential.
• Experience with policy as code and compliance automation is expected.

Responsibilities

• AWS Organizations and SCP / RCP design and implementation.
• Cloud security governance and guardrails across multi account AWS environments.
• Strong understanding of AWS IAM, permission boundaries and access control models.
• Scripting and automation using Python and PowerShell.
• AWS security services including Config and CloudTrail.
• Policy as Code and compliance automation (Config Rules, Cloud Custodian or similar).
• Experience building automated security controls and remediation workflows.
• CI/CD integration for security and compliance enforcement.

Skills

Python scripting

PowerShell scripting

Cloud security governance

IAM and access control

CI/CD security integration

Automation and remediation workflows

Education

Tools

AWS Organizations

SCP/RCP design

Config Rules

Cloud Custodian

AWS Config

CloudTrail

Job description

CareCone Group is seeking a security-focused AWS specialist in Melbourne to design and implement multi-account guardrails and governance. You will work on IAM, permission boundaries, and automated controls using Python/PowerShell, Config, CloudTrail, and policy-as-code tools.

You will collaborate with CI/CD pipelines to enforce security/compliance and build remediation workflows across AWS environments.