Cloud Security Engineer - Infrastructure - AWS

OpenKrill; United States; Remote; USD 135,000 - 180,000; Full time

Benefits offered by this job

Remote

Health Insurance

401(k)

Paid Time Off

Disability Insurance

Job summary

OpenKrill is seeking a seasoned Cloud Security Engineer to strengthen security across AWS-based enterprise infrastructure. This fully remote role within the United States focuses on designing and maintaining security controls, automating policy enforcement, and guiding DevOps and SRE teams to embed security into the development lifecycle.

You will lead hardening, threat detection, and risk management efforts while collaborating with infrastructure and platform teams to enable secure innovation

Qualifications

• Bachelor's degree in a technical field or equivalent experience, with 8+ years in related roles.
• Extensive hands-on AWS security experience across IAM, networking, and encryption.
• Proficiency with Terraform or CloudFormation and CI/CD tooling.
• Experience securing Kubernetes and EKS, on Linux.
• Knowledge of threat detection, risk management, and compliance.

Responsibilities

• Design and implement AWS security controls for IAM, networking, encryption, and monitoring.
• Partner with SRE, DevOps, and platform teams to embed security into cloud platforms.
• Develop IaC security through Terraform/CloudFormation and policy enforcement in CI/CD.
• Improve cloud telemetry, investigate incidents, and automate remediation.
• Conduct architecture reviews and translate risk into safeguards.
• Automate security operations and streamline processes across cloud environments.
• Communicate risk and remediation to engineers and leaders.

Skills

AWS Security

Cloud Security Engineering

Terraform

CI/CD

Python

Networking

Threat Detection

Leadership

Education

Bachelor's degree

Tools

Terraform

CloudFormation

AWS Config

GuardDuty

KMS

Secrets Manager

Git

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Cloud Security Engineer - Infrastructure - AWS based in the United States.

Overview

We are looking for an experienced Cloud Security Engineer to strengthen the security of enterprise cloud infrastructure and AWS environments. In this hands‑on role, you will design, implement, and maintain security controls that protect critical systems while enabling engineering teams to innovate efficiently. You will collaborate with Site Reliability Engineering, Platform Engineering, DevOps, Infrastructure, and application development teams to embed security throughout the development lifecycle. From identity and access management to network protection, encryption, and automated compliance, you will help establish secure‑by‑default architectures. You will also drive Infrastructure‑as‑Code security practices, improve threat detection capabilities, and develop scalable safeguards that reduce operational risk. This remote opportunity is ideal for a seasoned security professional who enjoys solving complex technical challenges and shaping enterprise security standards.

Accountabilities

• Cloud Security Engineering: Design, implement, and maintain AWS security controls covering identity and access management, networking, encryption, monitoring, and cloud-native services. Apply least‑privilege principles and establish secure configurations across production environments.
• Infrastructure and Platform Security: Partner with infrastructure, platform, SRE, DevOps, and application teams to integrate security into enterprise platforms. Define secure baselines, hardening standards, reusable guardrails, and preventative controls to strengthen infrastructure resilience.
• Infrastructure‑as‑Code and DevSecOps: Develop and maintain security controls using Terraform, CloudFormation, reusable modules, and templates. Integrate automated policy enforcement, vulnerability scanning, configuration validation, and compliance checks into CI/CD pipelines.
• Cloud Monitoring and Incident Response: Improve the collection, protection, and centralization of cloud security telemetry. Collaborate with Security Operations teams to investigate incidents, strengthen threat detection, and develop automated remediation capabilities.
• Security Architecture and Risk Management: Conduct architecture reviews, identify vulnerabilities, and translate risk assessments into practical technical safeguards. Develop reference architectures, security patterns, engineering standards, and implementation guidance.
• Automation and Continuous Improvement: Use scripting and automation to streamline security operations, reduce manual intervention, and improve control effectiveness. Investigate complex technical issues and implement sustainable solutions across cloud and infrastructure environments.
• Cross‑Functional Collaboration: Communicate security risks, business implications, and remediation recommendations to engineers, architects, security specialists, and technology leaders. Manage multiple technical deliverables independently while contributing to shared security objectives.

Requirements

• Education and Experience: Bachelor's degree in a technical discipline or equivalent professional experience, with at least eight years of relevant industry experience. Candidates should have seven or more years of direct experience in cloud security engineering, application or product security, or a comparable discipline, alongside at least five years in cloud engineering, infrastructure engineering, DevSecOps, SRE, or related technical fields.
• AWS Security Expertise: Extensive hands‑on experience securing production AWS environments, including IAM policies, roles, trust relationships, permission boundaries, identity federation, cross‑account access, and least‑privilege design.
• Cloud Networking: Strong understanding of AWS networking and core network security concepts, including VPCs, subnets, routing, security groups, network ACLs, VPC endpoints, load balancers, DNS, TCP/IP, TLS, firewalls, proxies, and network segmentation.
• AWS Security Services: Practical experience with tools such as CloudTrail, AWS Config, GuardDuty, Security Hub, Inspector, IAM Access Analyzer, Key Management Service (KMS), and Secrets Manager.
• Infrastructure Engineering and Automation: Demonstrated proficiency with Infrastructure‑as‑Code technologies such as Terraform or CloudFormation, Git‑based development, CI/CD workflows, and scripting languages including Python, PowerShell, or Bash.
• Containers and Operating Systems: Experience securing Kubernetes and containerized environments, including Amazon EKS or comparable managed Kubernetes platforms, alongside working knowledge of Linux and common infrastructure technologies.
• Threat Detection and Risk Management: Understanding of cloud attack techniques, identity‑based attacks, privilege escalation, credential compromise, infrastructure vulnerabilities, encryption, key management, compliance, and security risk management.
• Technical Leadership and Problem‑Solving: Ability to troubleshoot complex infrastructure and security issues independently, evaluate risks, prioritize remediation, and manage multiple deliverables in a fast‑paced environment.
• Communication and Collaboration: Strong written and verbal communication skills, sound analytical judgment, and the ability to work effectively with technical teams and senior stakeholders.
• Preferred Qualifications: Relevant security certifications such as CISSP, CEH, GIAC, ISSAP, or CISM are advantageous. Experience at a senior technical or equivalent leadership level is also valued.

Benefits

• Salary: Annual base salary ranging from $135,000 to $180,000, depending on qualifications, relevant experience, skills, geographic location, and market conditions.
• Bonus Opportunities: Potential eligibility for a discretionary bonus, subject to applicable program guidelines, position eligibility, and management approval.
• Remote Work: Fully remote position, offering flexibility to work from a location within the United States.
• Healthcare Coverage: Access to medical, dental, and vision insurance plans.
• Financial Protection: Life insurance and disability insurance benefits.
• Retirement Planning: Eligibility to participate in a 401(k) retirement savings plan.
• Paid Time Off: Paid vacation and holidays, subject to the applicable company policies.
• Professional Growth: Opportunities to work with modern cloud technologies, strengthen enterprise security capabilities, and collaborate with experienced professionals across engineering and security disciplines.
• Inclusive Workplace: Equal employment opportunities, with consideration based on relevant qualifications and experience.