AI-First Security Architect (AWS CDK) — Remote Part-Time

Scalable Path; New York (NY); Remote; CAD 91,000 - 146,000; Part time

Job summary

Scalable Path is seeking an AI-first Security Engineer with an AWS CDK focus to join as a part-time, remote contributor. Your primary job is to own the security control surface of a multi-account AWS setup, including IAM, KMS, SSO, and per-tenant boundaries, with AI-generated CDK changes reviewed before deployment.

You will be the independent reviewer of record, ensuring least-privilege access, strong auditing, and SOC 2-aligned controls throughout CI gates and production boundaries.

Qualifications

• English required for collaboration with the team and stakeholders.
• Extensive experience with AWS concepts such as Organizations, IAM, KMS, SSO/identity, and multi-account design.
• AWS CDK and TypeScript proficiency to read and review AI-generated infrastructure.
• Familiarity with SOC 2 controls and building them into CI/pipelines.

Responsibilities

• Own AWS organization design, account structure, guardrails, and production deployment path.
• Manage IAM and access for offshore contractors with least-privilege, short-lived credentials, and 2FA.
• Oversee tenancy and key management, encryption posture, and audit logging.
• Review AI-generated infrastructure and code for security posture and control surface.
• Shape security posture of the AI gateway, including prompt-injection controls and provenance logging.
• Maintain evidence trails to support SOC 2 readiness from a running system.

Skills

English

AWS

DevOps

TypeScript

AWS CDK

Tools

AWS

CDK

TypeScript

DevOps

Job description

Scalable Path is seeking an AI-first Security Engineer with an AWS CDK focus to join as a part-time, remote contributor. Your primary job is to own the security control surface of a multi-account AWS setup, including IAM, KMS, SSO, and per-tenant boundaries, with AI-generated CDK changes reviewed before deployment.

You will be the independent reviewer of record, ensuring least-privilege access, strong auditing, and SOC 2-aligned controls throughout CI gates and production boundaries.