Cloud Security & Compliance Engineer II (IaC)

Amazon Web Services (AWS); Dallas (TX); On-site; USD 159,000 - 202,400; Full time

Benefits offered by this job

Health insurance

401(k) matching

Job summary

Amazon Web Services, Inc. is seeking a security-focused engineer to lead threat modeling, security design reviews, and architecture reviews for customer engagements in Dallas and beyond.

You will design preventive and detective controls, implement policy-as-code, and build secure-by-design IaC for Landing Zones and zero-trust architectures. You will write and review code and detections across Python, Terraform, CDK, CloudFormation, and Rego, and drive automated compliance pipelines with

Qualifications

• 3+ years programming in Python, Ruby, Go, Java, .NET, C++ or similar.
• 2+ years scripting, programming, and security code review.
• Bachelor's in STEM or IT Security.
• Knowledge of HTTP, DNS, TCP/IP networking.
• Ability to write/review code, IaC, detections for security defenses.
• Experience leading security investigations and root-cause analysis.

Responsibilities

• Lead threat modeling, security design reviews, and architecture reviews for customer engagements.
• Design and implement preventive, detective, and proactive controls (SCPs, RCPs, policy-as-code).
• Build secure-by-design IaC controls for Landing Zones, Control Tower, zero-trust architectures.
• Apply security best practices for authentication, authorization, encryption, least privilege.
• Write and review IaC/scripts/detections in Python, Terraform, CDK, CloudFormation, Rego.
• Develop automated compliance monitoring, evidence collection, visualization, and remediation pipelines.
• Integrate controls with AWS-native and third-party tooling.
• Prototype end-to-end security solutions and products.
• Identify risks and edge cases; propose implementation paths and go/no-go gates.
• Assist with content, identify gaps, and travel to customer sites as needed.

Skills

Python

Security engineering

Terraform

CloudFormation

AWS CDK

Rego

cfn-guard

OPA

Node.js/TypeScript

Go

Education

Bachelor's degree in STEM or IT Security

2+ years of scripting/automation experience

Tools

Terraform

CloudFormation

AWS CDK

Rego / Cedar

cfn-guard

Job description

Amazon Web Services, Inc. is seeking a security-focused engineer to lead threat modeling, security design reviews, and architecture reviews for customer engagements in Dallas and beyond.

You will design preventive and detective controls, implement policy-as-code, and build secure-by-design IaC for Landing Zones and zero-trust architectures. You will write and review code and detections across Python, Terraform, CDK, CloudFormation, and Rego, and drive automated compliance pipelines with