Remote Senior AWS Cloud Security Architect with Policy

Vertical Relevance; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Vertical Relevance seeks a Senior AWS Cloud Security Consultant to design remotely and enforce enterprise cloud security controls within a highly regulated environment. You will focus on preventing data exfiltration through policy-as-code, data perimeter controls, and proactive threat modeling.

You will evaluate AWS services before production, identify API/config risks, and implement preventive controls using AWS Organizations policies, IAM guardrails, and Rego-based policy frameworks.

Qualifications

• At least 8+ years in cloud engineering/security or infrastructure security.
• Deep expertise in AWS security architecture and governance.
• Experience performing API-level threat modeling for AWS services.
• Hands-on experience with OPA, Rego, and policy testing/validation.
• Knowledge of AWS IAM, AWS Organizations, SCPs/RCPs, and data perimeter architecture.
• Experience designing least-privilege access models in regulated environments.
• Strong understanding of cloud security controls, compliance requirements, and enterprise governance frameworks.

Responsibilities

• Evaluate AWS services before production deployment.
• Identify security risks at API and configuration levels.
• Implement preventive controls using AWS Organizations policies and IAM guardrails.
• Leverage Rego-based policy frameworks and OPA for policy enforcement.
• Support data perimeter architecture and governance initiatives.

Skills

8+ years of cloud security experience

AWS security architecture

Threat modeling for AWS

Least-privilege access design

Governance and compliance awareness

Tools

Open Policy Agent (OPA)

Rego policy development

Terraform

GitHub Actions

Checkov

Conftest

Policy Sentry

Cloudsplaining

CloudWatch

CloudTrail

VPC Flow Logs

Amazon EKS security

Kivera.io

Cloudflare One

Job description

Vertical Relevance seeks a Senior AWS Cloud Security Consultant to design remotely and enforce enterprise cloud security controls within a highly regulated environment. You will focus on preventing data exfiltration through policy-as-code, data perimeter controls, and proactive threat modeling.

You will evaluate AWS services before production, identify API/config risks, and implement preventive controls using AWS Organizations policies, IAM guardrails, and Rego-based policy frameworks.