AWS Cloud Security & Governance

CareCone Group; Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

CareCone Group is seeking an AWS security engineer to design and implement guardrails across multi-account environments in Melbourne, Australia. The role focuses on IAM, policy as code, and automation using Python and PowerShell to enforce compliance.

You will build remediation workflows, integrate security checks into CI/CD pipelines, and ensure governance using Config Rules and CloudTrail. The position targets professionals with cloud security and automation expertise.

Qualifications

• Experience designing and implementing AWS security controls and guardrails across multiple accounts.
• Strong knowledge of AWS IAM and permission models for scalable environments.
• Automation using Python and PowerShell to enforce security policies.
• Hands-on experience with AWS Config, CloudTrail and policy as code.
• Proven ability to build remediation workflows and integrate with CI/CD pipelines.

Responsibilities

• Design and implement AWS Organizations structure and SCP/RCP policy sets.
• Establish security governance and guardrails across multi-account AWS estates.
• Maintain IAM access models and permission boundaries for teams.
• Develop and apply Config Rules and automation for compliance enforcement.
• Create remediation workflows and integrate security checks in CI/CD pipelines.

Skills

AWS security design

Cloud governance

IAM and access control

Scripting (Python, PowerShell)

Config and CloudTrail

Policy as Code

Remediation workflows

CI/CD security integration

Tools

AWS Organizations

SCP/RCP design

Config Rules

Cloud Custodian

CI/CD tooling

Job description

• AWS Organizations and SCP / RCP design and implementation.
• Cloud security governance and guardrails across multi account AWS environments.
• Strong understanding of AWS IAM, permission boundaries and access control models.
• Scripting and automation using Python and PowerShell.
• AWS security services including Config and CloudTrail.
• Policy as Code and compliance automation (Config Rules, Cloud Custodian or similar).
• Experience building automated security controls and remediation workflows.
• CI/CD integration for security and compliance enforcement.