Senior AWS Cloud Security Consultant

HIGH BRIDGE CONSULTING LLC; New York (NY); Presencial; USD 170.000 - 210.000; Jornada completa

Descripción de la vacante

Senior AWS Cloud Security Consultant at HIGH BRIDGE CONSULTING LLC in Manhattan, NY, will shape enterprise cloud security architecture and governance. You will design policy-as-code, enforce preventive controls, and model threats to prevent data exfiltration.

Strong collaboration with security and compliance teams is expected. You will evaluate AWS services pre-production, implement IAM guardrails, and drive secure deployment pipelines using Terraform, OPA, and related tooling across regulated

Formación

• 8+ years of cloud engineering, cloud security, or infrastructure security experience.
• Deep expertise in AWS security architecture and governance.
• Demonstrated API-level threat modeling experience for AWS services.
• Hands-on with Open Policy Agent (OPA), Rego policy development, testing and validation.
• Advanced knowledge of AWS IAM, AWS Organizations, SCPs and RCPs, data perimeter architecture.
• Experience designing least-privilege access models in regulated environments.
• Strong understanding of cloud security controls, compliance requirements, and enterprise governance frameworks.

Responsabilidades

• Design and enforce enterprise cloud security controls within a highly regulated environment.
• Evaluate AWS services before production, identify API/config risks, implement preventive controls.
• Help secure critical business platforms with policy-as-code and data perimeter protections.
• Collaborate on governance strategies and compliance with enterprise teams.

Conocimientos

Cloud security

Security governance

Threat modeling

Least-privilege access

Herramientas

OPA

Rego

Terraform

GitHub Actions

Checkov

Conftest

Policy Sentry

CloudWatch

CloudTrail

VPC Flow Logs

Amazon EKS

Descripción del empleo

Our client is a 3rd-generation management consulting firm that is expanding its team and looking to hire a Senior AWS Cloud Security Consultant on a full-time, permanent basis. This will be in Manhattan, NY.

Summary

The client is seeking a Senior AWS Cloud Security Consultant to help design and enforce enterprise cloud security controls within a highly regulated environment. This role sits at the intersection of cloud security architecture, policy engineering, and AWS governance, with a primary focus on preventing data exfiltration through policy-as-code, data perimeter controls, and proactive threat modeling.

You will evaluate AWS services before they are introduced into production environments, identify potential security risks at the API and configuration level, and implement preventive controls using AWS Organizations policies, IAM guardrails, and Rego-based policy frameworks.

This is an opportunity to work on complex cloud security challenges supporting critical business platforms where security, compliance, and operational rigor are non-negotiable.

Key Responsibilities

• 8+ years of cloud engineering, cloud security, or infrastructure security experience.
• Deep expertise in AWS security architecture and governance.
• Demonstrated experience performing API-level threat modeling for AWS services.
• Strong hands-on experience with:
  1. Open Policy Agent (OPA)
  2. Rego policy development
  3. Policy testing and validation
• Advanced knowledge of:
  1. AWS IAM
  2. AWS Organizations
  3. SCPs and RCPs
  4. Data perimeter architecture
• Experience designing least-privilege access models in regulated environments.
• Strong understanding of cloud security controls, compliance requirements, and enterprise governance frameworks.

Preferred Qualifications

• Experience with Kivera.io, Cloudflare One, or similar cloud API policy enforcement platforms.
• Experience with Regal policy linting and OPA coverage reporting.
• Infrastructure-as-Code expertise using Terraform.
• CI/CD experience with:
  1. GitHub Actions
  2. OIDC federation
  3. Policy validation pipelines
  4. Approval-based deployment models
• Experience with:
  1. Checkov
  2. Conftest
  3. Policy Sentry
• Cloudsplaining
• Strong AWS observability experience using:
  1. CloudWatch
  2. CloudTrail
  3. VPC Flow Logs
• Amazon EKS security and governance experience.
• Experience working directly with AWS Support and Technical Account Managers.
• Financial services, banking, capital markets, or other highly regulated industry experience.

Technical Environment

• AWS Organizations with SCP and RCP governance
• Open Policy Agent (OPA)
• Rego policy language
• Kivera.io policy enforcement platform
• Cloudflare One
• Terraform
• GitHub Actions
• CloudWatch
• CloudTrail
• VPC Flow Logs
• Amazon EKS
• Enterprise Data Perimeter Architecture