Aws Engineer

PwC; Hyderabad, Gurugram District, Bengaluru; Hybrid; INR 1,500,000 - 2,100,000; Full time

Job summary

PwC Hyderabad is seeking an experienced IT security engineer to strengthen cloud security within AWS environments. You will design least-privilege IAM, implement encryption, monitor logs, and drive secure configurations across CI/CD pipelines.

With 5–8 years in IT or security engineering, you will partner with clients and delivery teams in Agile settings, ensuring audit-ready evidence for PCI DSS, SOC 2, ISO 27001 and similar standards.

Qualifications

• 5-8 years of overall IT or security engineering experience, with 3+ years hands-on in AWS infrastructure and AWS security specifically.
• Least-privilege identity design in AWS: IAM, IAM Identity Center and permission sets, roles, service-linked roles, SCPs, and AWS Organizations.
• Network security in AWS: VPC design, segmentation, and traffic controls.
• Encryption and secrets: KMS, Secrets Manager, and key management practices.
• Logging and detection: CloudTrail, Config, GuardDuty, and Security Hub, including finding aggregation and remediation.
• Experience writing AWS Lambda functions and Athena queries to analyze CloudTrail data centrally.
• Infrastructure as Code (Terraform or CloudFormation) for provisioning and enforcing secure configurations.
• CI/CD security: GitHub Actions OIDC, short-lived federated credentials, and elimination of static cloud secrets.
• Remediation ownership: triage, tracking, exception governance, and evidence collection.
• Experience delivering in regulated environments (e.g. PCI DSS, SOC 2, ISO 27001, NIST, FFIEC-aligned programs, FedRAMP, or client-specific control frameworks) with audit-ready evidence expectations.
• Experience working in Agile delivery environments using tools such as Jira, Azure DevOps, Confluence, ServiceNow, GitHub, GitLab, or equivalent.
• Strong written and verbal communication and client-facing delivery skills.

Skills

AWS security

IAM & IAM Identity Center

AWS network security

Encryption & Secrets

Logging & detection

Athena queries

Infrastructure as Code

CI/CD security

Remediation ownership

Auditing in regulated environments

Agile delivery tools

Communication skills

Tools

Terraform

CloudFormation

Jira

Azure DevOps

Confluence

ServiceNow

GitHub

GitLab

Job description

Required Qualifications

• 5-8 years of overall IT or security engineering experience, with 3+ years hands-on in AWS infrastructure and AWS security specifically.
• Least-privilege identity design in AWS: IAM, IAM Identity Center and permission sets, roles, service-linked roles, SCPs, and AWS Organizations.
• Network security in AWS: VPC design, segmentation, and traffic controls.
• Encryption and secrets: KMS, Secrets Manager, and key management practices.
• Logging and detection: CloudTrail, Config, GuardDuty, and Security Hub, including finding aggregation and remediation.
• Experience writing AWS Lambda functions and Athena queries to analyze CloudTrail data centrally.
• Infrastructure as Code (Terraform or CloudFormation) for provisioning and enforcing secure configurations.
• CI/CD security: GitHub Actions OIDC, short-lived federated credentials, and elimination of static cloud secrets.
• Remediation ownership: triage, tracking, exception governance, and evidence collection.
• Experience delivering in regulated environments (e.g. PCI DSS, SOC 2, ISO 27001, NIST, FFIEC-aligned programs, FedRAMP, or client-specific control frameworks) with audit-ready evidence expectations.
• Experience working in Agile delivery environments using tools such as Jira, Azure DevOps, Confluence, ServiceNow, GitHub, GitLab, or equivalent.
• Strong written and verbal communication and client-facing delivery skills.