AWS Cloud Security Engineer – Governance & Automation

CareCone Group; Melbourne; On-site; AUD 110,000 - 165,000; Part time

Job summary

CareCone Group in Melbourne seeks a contract-focused AWS security engineer to design and implement SCP/RCP structures, guardrails, and governance across multi-account AWS environments. You will shape IAM models, automate controls, and embed policy-as-code into CI/CD processes.

The role requires scripting in Python/PowerShell, and experience with AWS Config, CloudTrail, and Cloud Custodian or equivalent tooling to enforce compliance and remediation workflows.

Qualifications

• AWS Organizations and SCP / RCP design and implementation.
• Cloud security governance and guardrails across multi account AWS environments.
• Strong understanding of AWS IAM, permission boundaries and access control models.
• Scripting and automation using Python and PowerShell.
• Policy as Code and compliance automation (Config Rules, Cloud Custodian or similar).
• Experience building automated security controls and remediation workflows.
• CI/CD integration for security and compliance enforcement.

Responsibilities

• Design and implement SCP/RCP and guardrails for AWS Organizations.
• Establish governance across multi-account AWS environments.
• Develop automated security controls and remediation workflows.
• Integrate security policies into CI/CD pipelines to enforce compliance.

Skills

Cloud security

Scripting

CI/CD

AWS IAM

Tools

AWS Config

CloudTrail

Cloud Custodian

Job description

CareCone Group in Melbourne seeks a contract-focused AWS security engineer to design and implement SCP/RCP structures, guardrails, and governance across multi-account AWS environments. You will shape IAM models, automate controls, and embed policy-as-code into CI/CD processes.

The role requires scripting in Python/PowerShell, and experience with AWS Config, CloudTrail, and Cloud Custodian or equivalent tooling to enforce compliance and remediation workflows.