AWS Cloud Security Engineer - Hybrid (Governance & Terraform)

Vertical Relevance; New York (NY); Hybrid; USD 150,000 - 210,000; Full time

Job summary

Vertical Relevance is hiring an AWS Cloud Security Engineer in the New York metro area for a full-time, hybrid role. You will plan, build, and deploy secure cloud solutions, driving SCP/RCP governance using Terraform and multi-account controls with Control Tower AFT.

You will partner with customers to design, implement security controls, develop runbooks, reference architectures, and technical content, translating requirements into repeatable, scalable outcomes for large-scale AWS environments.

Qualifications

• Author SCP and RCP policy rule sets in Terraform.
• Implement and deploy policies through Control Tower AFT pipelines.
• Execute policy testing and blast radius analysis in sandbox environments.
• Deploy policies from Sandbox OU to NCZ and DPZ/Critical Zone.
• Build VPC endpoint, S3, and KMS resource-based policies.
• Develop runbooks and conduct knowledge transfer.
• Hands-on AWS SCP and RCP authoring experience
• Terraform and Infrastructure-as-Code expertise
• AWS Organizations and multi-account governance experience
• IAM Access Analyzer and IAM policy evaluation
• VPC Endpoint, Amazon S3, and AWS KMS policy experience
• AWS Certified Security - Specialty
• AWS Control Tower AFT experience
• Runbook authoring and knowledge transfer experience.
• Experience in software/technology customer facing experience. Must be able to code with Python.

Responsibilities

• Help customers shape their journey to adopting the cloud and provide our customers with technical and strategic guidance on their “cloud journey”.
• Consult, plan, design, and implement security solutions on the cloud customers.
• Design and automate security and compliance solutions.
• Become a deep technical resource that earns our customer's trust.
• Develop high-quality technical content such as automation tools, reference architectures, and white papers to help our customers build on the cloud.
• Innovate on behalf of customers and translate your thoughts into action yielding measurable results.
• Assist with technical briefs that document solutions.
• Assist with reference architecture implementations.
• Work with Marketing/Alliances to write blog posts.
• Work with Marketing/Alliances to develop internal case studies.
• Create runbooks to automate AWS account setup and configuration.
• Develop playbooks and controls for cloud governance.

Skills

AWS SCP/RCP authoring

Terraform

IAM policy evaluation

Security & Compliance

Control Tower AFT

Python

Education

AWS Certified Security - Specialty

Tools

Jenkins

Gitlab

Terraform

Vault

Git

Splunk

OWASP

Trend Micro

Palo Alto

Fortify

Twistlock

Aqua Security

Job description

Vertical Relevance is hiring an AWS Cloud Security Engineer in the New York metro area for a full-time, hybrid role. You will plan, build, and deploy secure cloud solutions, driving SCP/RCP governance using Terraform and multi-account controls with Control Tower AFT.

You will partner with customers to design, implement security controls, develop runbooks, reference architectures, and technical content, translating requirements into repeatable, scalable outcomes for large-scale AWS environments.