Senior Cloud Security Engineer - Platform & IAM

BusPatrol America LLC; Austin (TX); Sur place; USD 140 000 - 190 000; Plein temps

Avantages offerts par ce poste

Unlimited PTO

Competitive benefits

Mission-driven work

Résumé du poste

BusPatrol seeks a Senior Cybersecurity Engineer to secure its cloud platform by default. You will own security across multi‑account AWS environments, implement least‑privilege access, and build reusable Terraform modules and CDK constructs.

You will partner with DevOps, platform engineering, and security teams to automate controls, drive policy‑as‑code, and improve telemetry and incident response capabilities. Strong expertise in IAM, KMS, and CI/CD security is required.

Qualifications

• 8–10+ years in cloud/security engineering or related field.
• Deep hands-on experience securing production AWS environments across multiple accounts.
• Strong knowledge of IAM, KMS, Secrets Manager, Security Hub, AWS Config, and VPC security.
• Experience with IaC tooling (Terraform, AWS CDK, CloudFormation).
• Experience designing least-privilege access and privileged access controls.
• Experience securing CI/CD pipelines and software supply chain security.
• Ability to communicate clearly with engineers, architects, security teams, and auditors.

Responsabilités

• Design and improve security controls across multi‑account AWS environments.
• Implement least-privilege IAM patterns and cross‑account access controls.
• Build secure, reusable Terraform modules and CDK constructs.
• Evolve guardrails via Organizations, Control Tower, SCPs and governance patterns.
• Secure cloud networking including VPCs, routing, GW, and Direct Connect.
• Manage secrets and encryption with KMS, Secrets Manager, Parameter Store.
• Integrate security checks into GitHub Actions and delivery pipelines.
• Develop policy‑as‑code and guardrails using AWS Config, OPA, Conftest, Checkov, tfsec.
• Define secure golden paths and documented platform templates.
• Maintain security telemetry and respond to security findings and incidents.

Connaissances

AWS cloud security

IAM governance

IaC security

Vulnerability management

Cloud networking security

CI/CD security

Security automation

Incident response

Documentation

Cross-functional leadership

Outils

Terraform

AWS CDK

CloudFormation

OPA

Checkov

tfsec

Wiz

Description du poste

BusPatrol seeks a Senior Cybersecurity Engineer to secure its cloud platform by default. You will own security across multi‑account AWS environments, implement least‑privilege access, and build reusable Terraform modules and CDK constructs.

You will partner with DevOps, platform engineering, and security teams to automate controls, drive policy‑as‑code, and improve telemetry and incident response capabilities. Strong expertise in IAM, KMS, and CI/CD security is required.