Senior Cloud Security Engineer | AWS, SRE & DevSecOps

Wiraa; United States; Remote; USD 135,000 - 180,000; Full time

Benefits offered by this job

Competitive full-time salary

Discretionary bonus

Health benefits (medical, dental, and

Life and disability insurance

401(k) retirement plan

PTO and holidays

Professional development

Inclusive work environment

Job summary

SitusAMC is seeking a Senior Cloud & Infrastructure Security Engineer to design, implement, and maintain robust security controls across our cloud and infrastructure. This hands-on role partners with SRE, Platform, and DevOps teams to embed secure configurations by default and enforce least privilege.

The ideal candidate will bring extensive AWS security experience, IaC proficiency with Terraform/CloudFormation, and strong communication skills to translate risk into actionable controls.

Qualifications

• Bachelor’s degree or equivalent professional experience in a technical field.
• 8+ years in relevant industry experience, including 2+ years at AVP level or equivalent.
• At least 7+ years in cloud security engineering, application security, or related fields.
• 5+ years in cloud engineering, infrastructure security, DevSecOps, or SRE.
• Relevant security certifications such as CISSP, CEH, GIAC, ISSAP, CISM preferred.
• Hands-on experience securing AWS environments, including IAM, VPC, encryption, monitoring.
• Experience with Kubernetes, EKS, or similar container orchestration platforms.
• Proficiency with Infrastructure-as-Code tools like Terraform, CloudFormation, or similar.
• Knowledge of networking concepts, Linux infrastructure, and scripting languages such as Python, PowerShell, or Bash.
• Strong understanding of cloud security services including CloudTrail, GuardDuty, Security Hub, and others.
• Excellent communication skills with the ability to articulate security risks and solutions to technical and non-technical stakeholders.

Responsibilities

• Design, implement, and maintain security controls across AWS cloud environments, including IAM policies, VPC configurations, encryption, and monitoring.
• Apply the principle of least privilege and enforce secure networking practices to safeguard cloud resources.
• Partner with SRE, Platform, Infrastructure, DevOps, and development teams to establish secure baselines, hardening standards, and preventative controls.
• Review infrastructure designs to identify security gaps and recommend scalable remediation strategies.
• Develop and maintain security controls through Infrastructure-as-Code using Terraform, CloudFormation, and reusable modules.
• Integrate automated security policies, vulnerability assessments, and compliance checks into CI/CD pipelines.
• Monitor cloud security telemetry, investigate incidents, and collaborate with Security Operations to develop automated detection and remediation capabilities.
• Conduct security architecture reviews and translate risk requirements into practical technical controls.
• Develop reference architectures, security patterns, and technical standards to guide secure cloud adoption.
• Communicate cloud security risks, business impact, and mitigation strategies to stakeholders effectively.
• Participate in ongoing security training, audits, and compliance activities to ensure adherence to industry standards.

Skills

Cloud security engineering

DevSecOps

SRE practices

Security strategy & leadership

Communication skills

Education

Bachelor’s degree in a technical field

Equivalent professional experience

Tools

Kubernetes

EKS

Terraform

CloudFormation

Python

PowerShell

Bash

IAM / VPC / encryption services

CloudTrail / GuardDuty / Security Hub

Job description

SitusAMC is seeking a Senior Cloud & Infrastructure Security Engineer to design, implement, and maintain robust security controls across our cloud and infrastructure. This hands-on role partners with SRE, Platform, and DevOps teams to embed secure configurations by default and enforce least privilege.

The ideal candidate will bring extensive AWS security experience, IaC proficiency with Terraform/CloudFormation, and strong communication skills to translate risk into actionable controls.