Senior Cloud Infrastructure & Security Engineer

AMroute LLC; United States; Remote; USD 60,000 - 90,000; Full time

Job summary

AMroute LLC is seeking a Senior Cloud Infrastructure & Security Engineer to design and implement secure AWS-based infrastructure in a remote role. The project focuses on AWS Organizations, VPC design, logging, and hybrid connectivity with IaC tools such as Terraform or CloudFormation.

Responsibilities include IAM least-privilege design, encryption management, HIPAA and NIST alignment, centralized monitoring, and secure, compliant cloud environments across teams.

Qualifications

• Experience building and deploying multi-account AWS environments.
• Knowledge of IAM least-privilege and security best practices.
• Familiarity with HIPAA security requirements and NIST 800-53 controls.

Skills

AWS Organizations

Transit Gateway

VPC design & logging

Hybrid connectivity

Load balancing

Infrastructure as code

Tools

Terraform

CloudFormation

Job description

Job Title: Senior Cloud Infrastructure & Security Engineer

Duration: 360 hours

Location: Remote

Job description:

AWS Cloud Infrastructure Skills

• AWS Organizations and account deployment
• Transit Gateway design and deployment
• Inspection and Endpoints VPC design and deployment
• Centralized logging
• Hybrid connectivity between AWS and on-premises (VPN or Direct Connect)
• Shared services and load balancing
• Infrastructure as code (Terraform or CloudFormation)

Security and compliance skills

• AWS IAM and least-privilege policy design
• Removable vendor admin access model and clean access termination
• Encryption and key management (KMS), including key handover to the customer
• AWS Config, Security Hub, Audit Manager, and CloudTrail
• HIPAA Security Rule and HIPAA Omnibus conformance packs
• CIS Benchmark controls
• NIST 800-53 controls

Team-wide requirements (every hire)

Check each item only when all five hires meet it.

• U.S.-based and available U.S. business hours
• Available through Thanksgiving and year-end holidays
• Passed a healthcare-grade background check
• Accepted the no-PHI delivery model in writing
• Reviewed the SOW scope (no commercials) under NDA
• Confirmed in writing that their portion can be delivered by December 31, 2026
• Contract signed with the hard stop and delivery date written in