Senior AWS Security & DevOps Engineer

Govserviceshub; Fort Worth (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Govserviceshub in Fort Worth, TX seeks an experienced Cloud Security Engineer to advance governance and automation across AWS environments. You'll implement SCPs, IAM, Config and Security Hub, develop IQ scripts, and collaborate with ProServe and IT stakeholders to strengthen security posture and compliance across landing zone architectures.

Remote collaboration is possible with distributed teams, and you will contribute to best practices, documentation, and incident response processes to keep

Qualifications

• 7+ years of experience in cloud engineering or DevOps.
• Hands-on AWS experience with Organizations, SCPs, IAM, Config, and Security Hub.
• Proficient in Python or Bash scripting.
• Experience with IaC tools and CI/CD automation.

Responsibilities

• Implement and configure AWS Service Control Policies (SCPs) and AWS Config rules aligned with security best practices.
• Create and execute IQ scripts to verify and validate security configurations.
• Contribute to and enhance the Landing Zone automation scripts (Infrastructure as Code).
• Collaborate closely with the AWS ProServe team and Alcon IT stakeholders to align implementation with governance and security goals.
• Support change control, documentation, and implementation of AWS security configurations in a compliant and traceable way.
• Troubleshoot, analyze, and resolve security and configuration issues in the AWS environment.
• Contribute to internal best practices and documentation for ongoing operations.

Skills

AWS

DevOps

CI/CD

Python

Bash

Terraform

CloudFormation

CDK

SCPs

IAM

Tools

Kubernetes

AWS Config

Security Hub

IQ scripting

Landing Zone automation

Terraform

CloudFormation

CDK

Job description

Govserviceshub in Fort Worth, TX seeks an experienced Cloud Security Engineer to advance governance and automation across AWS environments. You'll implement SCPs, IAM, Config and Security Hub, develop IQ scripts, and collaborate with ProServe and IT stakeholders to strengthen security posture and compliance across landing zone architectures.

Remote collaboration is possible with distributed teams, and you will contribute to best practices, documentation, and incident response processes to keep