Senior AWS Cloud Security & Infrastructure Engineer

SitusAMC; United States; On-site; USD 135,000 - 180,000; Full time

Benefits offered by this job

PTO and paid holidays

Medical, dental, vision benefits

401K plan

Job summary

SitusAMC is seeking a Senior Cloud & Infrastructure Security Engineer to design, implement and maintain security controls across cloud and infrastructure. This hands-on role partners with SRE, Platform, Infrastructure, and DevOps teams to bake secure configurations into cloud platforms from day one.

The ideal candidate will lead with expertise in AWS IAM, VPC, encryption, logging, and GuardDuty, combining security engineering with automation using Terraform/CloudFormation and CI/CD integrations.

Qualifications

• Bachelor’s degree in a technical field or equivalent experience.

Responsibilities

• Design and maintain AWS security controls across IAM, VPC, encryption, monitoring, and cloud-native services.
• Apply least-privilege access, secure networking, encryption, logging and monitoring standards.
• Define secure baselines, hardening standards, reusable guardrails, and preventive controls for infrastructure technologies.
• Build and maintain security controls through IaC using Terraform and CloudFormation.

Skills

AWS IAM

Kubernetes

CI/CD

Infrastructure as Code

Python scripting

Networking and security

Security engineering

Cloud security

Troubleshooting

Communication

Education

Bachelor’s degree in a technical field

6+ years cloud security or related

Tools

Terraform

CloudFormation

AWS services (GuardDuty, Config, CloudTrail)

Git

Terraform modules

EKS / Kubernetes platforms

Job description

SitusAMC is seeking a Senior Cloud & Infrastructure Security Engineer to design, implement and maintain security controls across cloud and infrastructure. This hands-on role partners with SRE, Platform, Infrastructure, and DevOps teams to bake secure configurations into cloud platforms from day one.

The ideal candidate will lead with expertise in AWS IAM, VPC, encryption, logging, and GuardDuty, combining security engineering with automation using Terraform/CloudFormation and CI/CD integrations.