AWS Cloud Security Engineer: IaC & CIS Hardening

Insight Global; Saint Paul (MN); On-site; USD 120,000 - 170,000; Full time

Job summary

Insight Global is seeking an experienced AWS Cloud Engineer to join a Security Green Team. The role focuses on translating vulnerability findings into automated remediation, codifying fixes as infrastructure as code, and hardening baselines against CIS benchmarks.

You will design policy enforcement, automate patch and image lifecycle management, and build hardened CI/CD pipelines with development teams. The engineer will coordinate server patching, prepare for container and Kubernetes workloads,

Qualifications

• 5-10 years of hands-on cloud engineering with deep AWS expertise.
• Proven experience hardening cloud environments to CIS Benchmarks for AWS.
• Track record establishing policies and guardrails across a hyperscaler (policy-as-code, continuous compliance).
• Strong CI/CD experience, building and hardening pipelines with development teams.
• Advanced automation and Infrastructure as Code, primarily Terraform.
• AWS Systems Manager Patch Manager and patch/lifecycle coordination.
• AWS identity and security services: IAM, security groups, KMS/Secrets Manager, logging and monitoring.
• Proficiency in Python and Bash for automation and reporting; Ansible for patch orchestration.

Responsibilities

• Assess the current AWS and cloud environment to identify hardening and config gaps.
• Validate guardrails meet CIS benchmarks across the AWS estate.
• Design and implement policy enforcement and guardrails via policy-as-code and continuous compliance.
• Codify fixes and standards as Infrastructure as Code (Terraform).
• Build and harden CI/CD pipelines with development teams and security gates.
• Prepare environment for forthcoming container and Kubernetes workloads.
• Coordinate server patching and lifecycle management with platform and Linux teams.
• Maintain dashboards and reporting on security posture and cloud risk.

Skills

AWS

Terraform

CI/CD

Python

Bash

Ansible

Kubernetes

Security tooling

IAM/KMS

Guardrails

Tools

Terraform

Ansible

Kubernetes

Job description

Insight Global is seeking an experienced AWS Cloud Engineer to join a Security Green Team. The role focuses on translating vulnerability findings into automated remediation, codifying fixes as infrastructure as code, and hardening baselines against CIS benchmarks.

You will design policy enforcement, automate patch and image lifecycle management, and build hardened CI/CD pipelines with development teams. The engineer will coordinate server patching, prepare for container and Kubernetes workloads,