AWS Cloud Security Engineer - Landing Zone & Terraform Pro

Allied Consultants, Inc.; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive pay

Local support staff

Medical insurance

Life insurance

401(K) plan with company match

Flexible spending through cafeteria

Job summary

Allied Consultants, Inc. in Austin, TX seeks an experienced Cloud Security Engineer to remediate a legacy AWS environment and migrate resources to a standardized Landing Zone. The role emphasizes Terraform-based IaC, security governance, and comprehensive documentation.

The engineer will implement IAM, network security, logging and encryption best practices, align with DIR standards, and collaborate across teams to reduce risk in a high-impact technical services group.

Qualifications

• 4-7 years of experience in cloud, infrastructure, or systems engineering.
• Hands-on experience supporting AWS environments.
• Experience remediating security findings or implementing security controls.
• Experience using Terraform to deploy, update, or manage cloud infrastructure.
• Familiarity with cloud security best practices and the shared responsibility model.
• Strong documentation and governance compliance abilities.

Responsibilities

• Remediate a legacy AWS cloud environment and address identified security vulnerabilities.
• Assess existing AWS workloads and migrate resources to a secure Landing Zone.
• Implement infrastructure as code with Terraform to ensure auditable remediation.
• Apply AWS security best practices for IAM, network security, logging, monitoring, and encryption.
• Produce technical and operational documentation.

Skills

Cloud engineering

AWS

Security best practices

Infrastructure engineering

Communication

Documentation

Tools

Terraform

Job description

Allied Consultants, Inc. in Austin, TX seeks an experienced Cloud Security Engineer to remediate a legacy AWS environment and migrate resources to a standardized Landing Zone. The role emphasizes Terraform-based IaC, security governance, and comprehensive documentation.

The engineer will implement IAM, network security, logging and encryption best practices, align with DIR standards, and collaborate across teams to reduce risk in a high-impact technical services group.