Cloud Security Consultant, DevSecOps – AWS

Role Overview

• Partner with customers to shape their cloud adoption journey, providing both technical and strategic guidance
• Design, plan, and implement secure cloud architectures aligned with business and compliance requirements
• Serve as a trusted advisor and deep technical resource to customers
• Design and implement automated security and compliance solutions in AWS
• Develop and maintain Infrastructure-as-Code (IaC) solutions using Terraform
• Build and operate CI/CD pipelines (GitHub Actions, Jenkins, CircleCI) for security automation
• Develop Python-based automation for provisioning, compliance enforcement, and remediation
• Implement AWS Control Tower guardrails and Service Control Policies (SCPs)
• Configure AWS Config rules with automated remediation workflows
• Develop and enforce policy-as-code frameworks (preventative, detective, responsive controls)
• Align implementations with industry standards such as CIS AWS Foundations
• Design and deploy centralized security monitoring and analytics frameworks
• Implement AWS-native security services, including: Security Hub (centralized findings aggregation), GuardDuty (threat detection), Macie (sensitive data discovery), Inspector (vulnerability management)
• Enable observability and auditing via CloudTrail, VPC Flow Logs, and CloudWatch
• Build self-service account provisioning frameworks using CI/CD pipelines
• Develop scalable landing zone and account baseline architectures
• Create reusable Terraform modules and automation frameworks
• Design reference architectures and implementation playbooks
• Create high-quality technical content (playbooks, runbooks, white papers, reference architecture)

Requirements

• Proven experience architecting and operating AWS-based security and compliance solutions
• Hands-on experience with Terraform for infrastructure and security control implementation
• Strong knowledge of AWS Control Tower, Organizations, and Service Control Policies (SCPs)
• Experience configuring AWS Config rules and automated remediation
• Experience building CI/CD pipelines (GitHub Actions, Jenkins, or CircleCI)
• Proficiency in Python for automation and scripting
• Experience working in customer-facing technical roles
• Must be authorized to work in the United States without sponsorship

Tech Stack

• AWS
• Cloud
• Jenkins
• Python
• Terraform

Benefits

• Cloud Strategy & Advisory
• Security Architecture & Automation
• Governance, Risk & Compliance
• Security Monitoring & Analytics
• Platform Engineering & Framework Development
• Customer Enablement & Thought Leadership