AWS Dev SecOps

HIGH BRIDGE CONSULTING LLC; Oregon; Hybrid; USD 130,000 - 170,000; Full time

Job summary

HIGH BRIDGE CONSULTING LLC is seeking an experienced AWS DevSecOps/Cloud Security Engineer to join our client’s team as a full-time, remote position in the United States. The role focuses on AWS cloud security, governance, policy automation, and Infrastructure-as-Code across a large multi-account AWS environment.

The ideal candidate has hands-on experience with SCPs/IAM policies, Terraform/IaC, and AWS security controls (S3, KMS, VPC).

Qualifications

• Strong hands-on AWS DevSecOps experience.
• Experience with AWS Organizations and multi-account environments.
• Hands-on with SCPs and IAM policies; RCP experience preferred.
• Terraform / IaC experience.
• Ability to design, test, troubleshoot, and safely roll out cloud security policies.
• Knowledge of S3, KMS, and VPC security controls.

Responsibilities

• Design, author, test, and deploy cloud security policies.
• Manage SCPs, IAM policies, and resource control policies.
• Implement cloud security controls using Terraform / IaC.
• Work with AWS Organizations, OUs, and Control Tower/AFT.
• Develop runbooks and provide knowledge transfer to teams.

Skills

AWS DevSecOps

Cloud Security

Multi-account AWS

SCPs and IAM policies

IaC

Policy automation

Tools

Terraform

IAM

S3

KMS

VPC

AWS Organizations

Control Tower/AFT

Job description

We are looking for strong AWS DevSecOps / Cloud Security Engineers to join our clients team as Full-Time Employees. The role focuses on AWS cloud security, governance, policy automation, and Infrastructure-as-Code across a large multi-account AWS environment.

Key Responsibilities

• Design, author, test, and deploy
• AWS Service Control Policies (SCPs)
• and
• Resource Control Policies (RCPs)
• .Implement cloud security controls using
• Terraform / Infrastructure-as-Code
• .Work with
• AWS Organizations, OUs, and Control Tower/AFT
• in a multi-account environment.Develop and manage
• IAM policies, IAM Access Analyzer, VPC endpoint policies, and resource-based policies
• .Protect critical AWS resources including
• S3, KMS, logging, and other security-sensitive services
• .Test policies in sandbox environments, assess
• blast radius
• , and support phased production rollouts.Develop security runbooks and provide knowledge transfer to engineering/operations teams.

Required

• Strong hands-on
• AWS DevSecOps / Cloud Security
• experience.
• Experience with
• AWS Organizations and multi-account AWS environments
• .Hands-on experience with
• SCPs and IAM policies
• ; RCP experience strongly preferred.
• Strong
• Terraform / IaC
• experience.
• Experience with
• AWS security controls, IAM, S3, KMS and VPC
• .Ability to design, test, troubleshoot, and safely roll out cloud security policies.

Preferred

• AWS Control Tower / Account Factory for Terraform (AFT)
• .IAM Access Analyzer
• .AWS Certified Security – Specialty
• Experience supporting enterprise-scale AWS environments
• Experience with security automation, governance, runbooks, and knowledge transfer.

Technology Environment

AWS | AWS Organizations | Control Tower/AFT | Terraform | IAM | IAM Access Analyzer | S3 | KMS | VPCThis is a remote position.