AWS Cloud Security Engineer — Governance & Automation

Jobgether; Oregon; Hybrid; USD 130,000 - 180,000; Full time

Job summary

Partner Company in the United States seeks an AWS Cloud Security Engineer to design, automate, and deploy security and governance across multi-account AWS environments. You will author SCPs and RCPs, implement policy-as-code with Terraform and AFT, and collaborate with customers to deliver secure cloud foundations.

You will contribute to automated compliance, security analytics, and reusable resources while translating security needs into policy definitions, testing in sandbox environments, and

Qualifications

• Hands-on AWS security engineering experience with SCPs and RCPs.
• Strong Terraform and Infrastructure-as-Code expertise.
• Experience with multi-account cloud governance and AWS Organizations.
• Proficiency in IAM Access Analyzer and policy evaluation best practices.
• Must be legally authorized to work in the United States.

Responsibilities

• Design, develop, and deploy automated security, governance, and DevSecOps solutions across AWS environments.
• Author and implement SCPs/RCPs using Terraform and AWS Control Tower AFT pipelines.
• Help customers strengthen cloud security posture and guidance throughout cloud transformation.
• Develop policy-as-code controls, testing, and automated deployment pipelines.
• Create reusable playbooks, runbooks, and technical content for ongoing operations.

Skills

AWS security

Terraform

AWS Control Tower

AFT (Account Factory for Terraform)

IAM Access Analyzer

Python

Tools

AWS CLI

CloudFormation

Job description

Partner Company in the United States seeks an AWS Cloud Security Engineer to design, automate, and deploy security and governance across multi-account AWS environments. You will author SCPs and RCPs, implement policy-as-code with Terraform and AFT, and collaborate with customers to deliver secure cloud foundations.

You will contribute to automated compliance, security analytics, and reusable resources while translating security needs into policy definitions, testing in sandbox environments, and