Senior AWS DevOps Security Engineer

Govserviceshub; Fort Worth (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Govserviceshub in Fort Worth, TX seeks an experienced Cloud Security Engineer to advance governance and automation across AWS environments. You'll implement SCPs, IAM, Config and Security Hub, develop IQ scripts, and collaborate with ProServe and IT stakeholders to strengthen security posture and compliance across landing zone architectures.

Remote collaboration is possible with distributed teams, and you will contribute to best practices, documentation, and incident response processes to keep

Qualifications

• 7+ years of experience in cloud engineering or DevOps.
• Hands-on AWS experience with Organizations, SCPs, IAM, Config, and Security Hub.
• Proficient in Python or Bash scripting.
• Experience with IaC tools and CI/CD automation.

Responsibilities

• Implement and configure AWS Service Control Policies (SCPs) and AWS Config rules aligned with security best practices.
• Create and execute IQ scripts to verify and validate security configurations.
• Contribute to and enhance the Landing Zone automation scripts (Infrastructure as Code).
• Collaborate closely with the AWS ProServe team and Alcon IT stakeholders to align implementation with governance and security goals.
• Support change control, documentation, and implementation of AWS security configurations in a compliant and traceable way.
• Troubleshoot, analyze, and resolve security and configuration issues in the AWS environment.
• Contribute to internal best practices and documentation for ongoing operations.

Skills

AWS

DevOps

CI/CD

Python

Bash

Terraform

CloudFormation

CDK

SCPs

IAM

Tools

Kubernetes

AWS Config

Security Hub

IQ scripting

Landing Zone automation

Terraform

CloudFormation

CDK

Job description

Fort Worth, United States | Posted on 10/25/2025

7+ years of experiencein cloud engineering or DevOps, with hands-on AWS experience.

Strong understandingof AWS Organizations, SCPs, IAM, AWS Config, and Security Hub.

Proven experiencewriting IQ scripts (Python, Bash, or other scripting languages).

Familiarity withInfrastructure as Code tools (Terraform, CloudFormation, CDK).

Experience integratingchanges into CI/CD pipelines and automation frameworks.

Strong problem-solvingand communication skills.

Ability to workindependently and collaboratively in distributed teams.

AWS Services,Kubernetes, networking, IAM, security policies, and AWS cost optimization

Requirements

JobResponsibilities

Implement andconfigure AWS Service Control Policies (SCPs) and AWS Config rules aligned withsecurity best practices.

Create and execute IQscripts to verify and validate security configurations.

Contribute to andenhance the existing Landing Zone automation scripts (Infrastructure as Code).

Collaborate closelywith the AWS ProServe team and Alcon IT stakeholders to align implementationwith broader governance and security goals.

Support changecontrol, documentation, and implementation of AWS security configurations in acompliant and traceable way.

Troubleshoot, analyze,and resolve security and configuration issues in the AWS environment.

Contribute to internalbest practices and documentation for ongoing operations.