Remote Cloud Security Engineer - AWS and IaC

SitusAMC Holdings Corporation; United States; Remote; USD 135,000 - 180,000; Full time

Benefits offered by this job

PTO

Health benefits

401K

Job summary

SitusAMC seeks a Senior Cloud & Infrastructure Security Engineer to design, implement, and maintain security controls across cloud and infrastructure environments. You will work hands-on with SRE, Platform, Infrastructure, DevOps, and development teams to embed security into cloud platforms from the outset.

The role requires deep cloud expertise, strong security engineering skills, and the authority to implement controls such as IAM policies, VPC configurations, guardrails, logging, and

Qualifications

• 8+ years in industry, with 2+ years in an AVP level role or external equivalent.
• 7+ years of direct experience in cloud security engineering, application/product security or a similar role
• 5+ years of experience in cloud engineering, infrastructure engineering, security engineering, DevSecOps, SRE, or related disciplines
• Certifications such as CISSP, CEH, GIAC, ISSAP, CISM preferred
• Hands-on experience securing production AWS environments including IAM, VPC, and least-privilege design
• Experience with Terraform, CloudFormation or equivalent IaC
• Experience with Git-based development and CI/CD workflows
• Strong networking knowledge and Linux skills
• Ability to develop automation using scripting languages
• Excellent communication skills and independent work capability

Responsibilities

• Design and maintain AWS security controls across IAM, VPC, encryption, monitoring, and cloud-native services.
• Apply least-privilege access, secure networking, encryption, logging, and monitoring standards.
• Support secure adoption of AWS services by translating cloud risks into technical safeguards.
• Partner with SRE, Platform, Infrastructure, DevOps, and development teams to secure enterprise platforms and cloud infrastructure.
• Define secure baselines, hardening standards, reusable guardrails, and preventative controls for infrastructure technologies.
• Review infrastructure designs to identify security gaps and recommend scalable remediation.
• Build and maintain security controls through IaC using Terraform, CloudFormation, modules, and templates.
• Integrate automated policy, configuration, vulnerability, and compliance checks into CI/CD pipelines.
• Embed security testing and guardrails into deployment workflows to reduce manual review.
• Centralize and protect cloud security telemetry for monitoring, detection, and incident response.
• Collaborate with Security Operations to investigate incidents and build automated detection/remediation.
• Use logs and findings to improve detection coverage and response readiness.
• Conduct security architecture reviews and translate risk requirements into practical controls.
• Communicate cloud/infrastructure risks, impacts, and remediation options to stakeholders.
• Develop reference architectures, security patterns, standards, and engineering guidance.
• Other tasks as assigned by manager

Skills

Cloud security

AWS IAM

Kubernetes security

CI/CD

Python scripting

DevSecOps

Threat modeling

Networking fundamentals

Linux

Communication

Education

Bachelor's degree in a technical field

Tools

Terraform

CloudFormation

Kubernetes (EKS)

Git/CI tools

Job description

SitusAMC seeks a Senior Cloud & Infrastructure Security Engineer to design, implement, and maintain security controls across cloud and infrastructure environments. You will work hands-on with SRE, Platform, Infrastructure, DevOps, and development teams to embed security into cloud platforms from the outset.

The role requires deep cloud expertise, strong security engineering skills, and the authority to implement controls such as IAM policies, VPC configurations, guardrails, logging, and