AWS Dev SecOps

HIGH BRIDGE CONSULTING LLC; United States; Remote; USD 120,000 - 200,000; Full time

Job summary

HIGH BRIDGE CONSULTING LLC is seeking strong AWS DevSecOps / Cloud Security Engineers to join as full-time employees. The role centers on AWS cloud security, governance, policy automation, and Infrastructure-as-Code across a large multi-account AWS environment.

Key responsibilities include designing SCPs/RCPs, implementing Terraform IaC security controls, and working with AWS Organizations, IAM policies, and Control Tower/AFT. Remote position within the United States is available.

Qualifications

• Strong hands-on AWS DevSecOps / Cloud Security experience.
• Experience with AWS Organizations and multi-account environments.
• Hands-on with SCPs and IAM policies; RCP experience strongly preferred.
• Strong Terraform / IaC experience.
• Experience with AWS security controls, IAM, S3, KMS and VPC.
• Ability to design, test, troubleshoot, and safely roll out cloud security policies.
• AWS Control Tower / Account Factory for Terraform (AFT).
• IAM Access Analyzer.

Responsibilities

• Design, test, and deploy AWS SCPs and RCPs.
• Implement security controls with Terraform / IaC.
• Work with AWS Organizations, OUs, and Control Tower/AFT in a multi-account environment.
• Develop IAM policies, IAM Access Analyzer, VPC endpoint policies, and resource-based policies.
• Protect resources like S3, KMS, logging, and other security-sensitive services.
• Test policies in sandbox environments, assess blast radius, and roll out production changes safely.
• Develop security runbooks and provide knowledge transfer to engineering/operations teams.

Skills

AWS DevSecOps

Cloud Security

Terraform / IaC

AWS Organizations

IAM Policies

SCPs / RCPs

Control Tower/AFT

Security Automation

Job description

We are looking for strong AWS DevSecOps / Cloud Security Engineers to join our clients team as Full-Time Employees. The role focuses on AWS cloud security, governance, policy automation, and Infrastructure-as-Code across a large multi-account AWS environment.

Key Responsibilities

• Design, author, test, and deploy AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).
• Implement cloud security controls using Terraform / Infrastructure-as-Code.
• Work with AWS Organizations, OUs, and Control Tower/AFT in a multi-account environment.
• Develop and manage IAM policies, IAM Access Analyzer, VPC endpoint policies, and resource-based policies.
• Protect critical AWS resources including S3, KMS, logging, and other security-sensitive services.
• Test policies in sandbox environments, assess blast radius, and support phased production rollouts.
• Develop security runbooks and provide knowledge transfer to engineering/operations teams.

Required

• Strong hands-on AWS DevSecOps / Cloud Security experience.
• Experience with AWS Organizations and multi-account AWS environments.
• Hands-on experience with SCPs and IAM policies; RCP experience strongly preferred.
• Strong Terraform / IaC experience.
• Experience with AWS security controls, IAM, S3, KMS and VPC.
• Ability to design, test, troubleshoot, and safely roll out cloud security policies.

Preferred

• AWS Control Tower / Account Factory for Terraform (AFT).
• IAM Access Analyzer.
• AWS Certified Security – Specialty.
• Experience supporting enterprise-scale AWS environments.
• Experience with security automation, governance, runbooks, and knowledge transfer.

Technology Environment

AWS | AWS Organizations | Control Tower/AFT | Terraform | IAM | IAM Access Analyzer | S3 | KMS | VPC

This is a remote position.