Employer description & source details
Extensive experience in AWS cloud security engineering, cloud security architecture, and securing large-scale production AWS environments. Expert knowledge of AWS Organizations, multi-account architectures, landing zones, and Service Control Policies (SCPs). Strong expertise in AWS IAM, least-privilege access, role-based access controls, identity federation, and privilege management. Hands-on experience designing and implementing AWS cloud security controls, including VPC security, network segmentation, private connectivity, and workload isolation. Strong experience securing Amazon EKS, Kubernetes clusters, containers, and cloud-native workloads. Proven expertise in Terraform and Infrastructure-as-Code (IaC) security, including policy enforcement, automated guardrails, and secure infrastructure provisioning. Strong understanding of Policy-as-Code practices and integrating security checks into CI/CD pipelines and DevSecOps workflows. Experience with AWS data protection capabilities, including encryption, AWS KMS, secrets management, key lifecycle management, and credential rotation. Knowledge of AWS-native security services for cloud security posture management, threat detection, logging, monitoring, and security incident investigation. Experience identifying and remediating cloud security misconfigurations, vulnerabilities, excessive permissions, and high-risk exposures. Understanding of cloud resilience, disaster recovery architecture, and security requirements for business-critical workloads. Experience supporting security audits, compliance assessments, risk remediation, and client security assurance activities. Ability to develop reusable security reference architectures, technical standards, remediation roadmaps, and measurable security controls. Strong technical l
Extracted skills: aws, kubernetes, terraform, security, devsecops