Senior Cloud Security & Compliance Engineer

Amazon; Seattle (WA); On-site; USD 178,400 - 226,700; Full time

Benefits offered by this job

Health insurance

RSUs

Job summary

Amazon in Seattle is seeking a Senior Security & Compliance Engineer to lead design, deployment, and implementation of secure, compliant AWS solutions. You will build AI-enabled automations, craft secure-by-design IaC, and drive enterprise-scale controls across Landing Zones, Control Tower, and zero-trust architectures.

The role requires strong programming skills (Python/Unit, Terraform, CDK/CloudFormation) and extensive experience deploying security controls, SCPs/RCPs, and policy-as-code.

Qualifications

• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience.
• 4+ years of scripting, programming, and security code review in common programming languages experience.
• Knowledge of at least two of: Scala, Java, Python, C/C++, or Go.

Responsibilities

• Own design and architecture choices for security and compliance automation solutions for regulated customers and influence partner-org design and deliverables.
• Engineer and lead AI-enabled automations, threat modeling, design reviews.
• Build secure-by-design IaC modules for Landing Zones, Control Tower customizations, Zero-Trust architectures, and AI/ML workloads.
• Lead the design, deployment, and implementation of AWS security controls, continuous compliance monitoring, evidence collection, and remediation of insecure configurations to scale with automation.
• Architect custom preventive, detective, and proactive controls, SCPs, RCPs, policy-as-code (cfn-guard, OPA Rego, Cedar).
• Set high bar for authentication and authorization, data protection, least privilege, encryption, micro-segmentation, tagging strategy, integrations via API and MCP, and secure AI agentic design.
• Write and review scripts, and IaC (Python, Terraform, AWS CDK, CloudFormation, Rego).
• Lead exploratory POCs on emerging technologies. Define the hypothesis, success criteria, and go/no-go gates.
• Lead alignment, resolve escalations, troubleshooting, and root-cause analysis to closure.
• Lead the development of technical content.
• Communicate security risk and design decisions clearly verbally and in writing to technical, non-technical, and C-level audiences.
• Identify and shape sales opportunities. influence service-team roadmaps and SAS offering strategy.
• Travel to customer sites as needed.

Skills

Python

Java

Go

C/C++

Education

CISSP

AWS Solutions Architect Professional

AWS Security Specialty

Tools

Terraform

AWS CDK

CloudFormation

Job description

Amazon in Seattle is seeking a Senior Security & Compliance Engineer to lead design, deployment, and implementation of secure, compliant AWS solutions. You will build AI-enabled automations, craft secure-by-design IaC, and drive enterprise-scale controls across Landing Zones, Control Tower, and zero-trust architectures.

The role requires strong programming skills (Python/Unit, Terraform, CDK/CloudFormation) and extensive experience deploying security controls, SCPs/RCPs, and policy-as-code.