AWS Security Engineer/Migrations

Akaasa Technologies; Secaucus (NJ); Hybrid; USD 140,000 - 180,000; Full time

Job summary

Akaasa Technologies in Secaucus, NJ is seeking an experienced Cloud Security Engineer to lead migrations of on-prem networks into AWS and re-architect them using native cloud services.

The role requires hands-on experience migrating firewalls, VPNs, and load balancers, plus designing secure cloud architectures with Terraform, Ansible, and Python automation. Hybrid work with limited relocation may apply.

Qualifications

• Experience migrating on-prem networks to AWS and re-architecting into cloud-native services.
• Hands-on with firewalls, VPNs, servers in AWS and hybrid environments.
• Strong security posture management and incident response in cloud.

Responsibilities

• Lead end-to-end migration of on-prem network infrastructure into AWS.
• Architect AWS networking components (VPCs, subnets, Transit Gateway, VPNs).
• Deploy and manage AWS security services (Security Groups, WAF, Shield, GuardDuty, IAM).
• Implement load balancing and CloudWatch observability for migrated assets.
• Own cloud security posture and compliance (SOX, PCI).
• Lead cloud-based incident response and forensics.

Skills

AWS cloud security

Terraform

Ansible

Python automation

CI/CD pipelines

GitHub workflows

Palo Alto firewall

Linux (RHEL)

Cloud security architecture

Tools

Terraform

Ansible

GitHub

Job description

Required Candidate Location: Secaucus, NJ HYBRID/ A FEW TIMES A QUARTER - NO RELOCATION

We are seeking an experienced (10+ Years) Cloud Security Engineer with a proven track record leading the migration of on-premises network infrastructure into AWS. This role is built for a cloud-native security professional, not a traditional network engineer, who has hands-on experience migrating servers, firewalls, VPNs, and load balancers into AWS and re-architecting them using AWS-native services. The ideal candidate has already led this exact type of migration and can speak directly to the tradeoffs, architecture decisions, and security posture required to do it at scale.

Job Description:

Cloud Security Engineer AWS Infrastructure & Migration

We are seeking an experienced Cloud Security Engineer (10 years minimum) with a proven track record leading the migration of on-premises network infrastructure into AWS. This role is built for a cloud-native security professional, not a traditional network engineer, who has hands-on experience migrating servers, firewalls, VPNs, and load balancers into AWS and re-architecting them using AWS-native services. The ideal candidate has already led this exact type of migration and can speak directly to the tradeoffs, architecture decisions, and security posture required to do it at scale.

Core Focus: AWS Migration & Cloud Security

• Lead end-to-end migration of on-prem network infrastructure (firewalls, VPNs, servers) into AWS, replacing legacy hardware with cloud-native equivalents
• Architect AWS networking: VPCs, subnets, routing, Transit Gateway, VPN connections, and hybrid connectivity between on-prem and cloud environments
• Deploy and manage AWS security services including Security Groups, Network Firewall, WAF, Shield, GuardDuty, and IAM
• Implement AWS load balancing (ALB, ELB, Gateway Load Balancer) and CloudWatch observability for migrated infrastructure
• Own cloud security posture across AWS environments, ensuring compliance with SOX, PCI, and other cybersecurity frameworks
• Lead incident response and forensic investigations for cloud-based security events

Technical Requirements

• 5+ years working within AWS, with direct ownership of cloud security architecture
• Proven experience migrating on-prem network infrastructure (firewalls, VPNs, servers) into AWS, approached from the cloud side
• Proficiency in Infrastructure-as-Code: Terraform, Ansible, and Python automation
• Familiarity with CI/CD pipelines and GitHub workflows
• Working knowledge of Palo Alto or equivalent firewall technology, as it maps to cloud firewall concepts
• Comfortable in Linux/RHEL environments and command-line troubleshooting
• GCP experience a plus