Senior AWS Cloud Security Architect & Policy Engineer

HIGH BRIDGE CONSULTING LLC; New York (NY); On-site; USD 170,000 - 210,000; Full time

Job summary

Senior AWS Cloud Security Consultant at HIGH BRIDGE CONSULTING LLC in Manhattan, NY, will shape enterprise cloud security architecture and governance. You will design policy-as-code, enforce preventive controls, and model threats to prevent data exfiltration.

Strong collaboration with security and compliance teams is expected. You will evaluate AWS services pre-production, implement IAM guardrails, and drive secure deployment pipelines using Terraform, OPA, and related tooling across regulated

Qualifications

• 8+ years of cloud engineering, cloud security, or infrastructure security experience.
• Deep expertise in AWS security architecture and governance.
• Demonstrated API-level threat modeling experience for AWS services.
• Hands-on with Open Policy Agent (OPA), Rego policy development, testing and validation.
• Advanced knowledge of AWS IAM, AWS Organizations, SCPs and RCPs, data perimeter architecture.
• Experience designing least-privilege access models in regulated environments.
• Strong understanding of cloud security controls, compliance requirements, and enterprise governance frameworks.

Responsibilities

• Design and enforce enterprise cloud security controls within a highly regulated environment.
• Evaluate AWS services before production, identify API/config risks, implement preventive controls.
• Help secure critical business platforms with policy-as-code and data perimeter protections.
• Collaborate on governance strategies and compliance with enterprise teams.

Skills

Cloud security

Security governance

Threat modeling

Least-privilege access

Tools

OPA

Rego

Terraform

GitHub Actions

Checkov

Conftest

Policy Sentry

CloudWatch

CloudTrail

VPC Flow Logs

Amazon EKS

Job description

Senior AWS Cloud Security Consultant at HIGH BRIDGE CONSULTING LLC in Manhattan, NY, will shape enterprise cloud security architecture and governance. You will design policy-as-code, enforce preventive controls, and model threats to prevent data exfiltration.

Strong collaboration with security and compliance teams is expected. You will evaluate AWS services pre-production, implement IAM guardrails, and drive secure deployment pipelines using Terraform, OPA, and related tooling across regulated