Knowledge of Edge protection technologies such as AWS Shield, WAF, CloudFront
Strong working understanding of Identity and Access Management (IAM) and SSO Integration via Active Directory (Azure AD / ADFS)
Experience working in organizations with top level Control Tower or Landing Zone Accelerator (SCP’s, Guardrails, Config Rules, etc.)
Experience with monitoring systems such as CloudWatch / VPC Flow Logs and other industry standard visibility platforms (Splunk, DataDog, Dynatrace, New Relic, etc.)
Experience with Logging and log monitoring (CloudWatch and CloudTrail) both for security and compliance efforts
Proficiency with one or more scripting languages (python, json, yaml, bash, etc.)
Proficiency with Infrastructure as Code (IaC), including CloudFormation and/or Terraform
Understanding of CI/CD on AWS platform
Expert knowledge of AWS network and security features (VPC, Security Groups, NACLs, ALB/NLB, Transit Gateway, etc.)
Experience supporting applications with native services and serverless architecture (Lambda) on AWS platform
Strong understanding of high availability solutioning (multi-AZ / regions, Backup) and how security fits into this model
Demonstrated history of moving mission-critical applications from the data center to AWS
Ability to effectively adapt to rapidly changing technology and apply it to business needs.