Senior Cloud Infrastructure & Security Engineer

Confidential company is seeking a Senior Cloud Infrastructure & Security Engineer for a 360-hour engagement. The role focuses on designing and deploying AWS cloud infrastructure, hybrid connectivity, infrastructure as code, security controls, compliance frameworks, centralized logging, identity management, encryption, and audit capabilities.

Responsibilities:

• AWS Organizations and account deployment
• Transit Gateway design and deployment
• Inspection and Endpoints VPC design and deployment
• Centralized logging
• Hybrid connectivity between AWS and on-premises (VPN or Direct Connect)
• Shared services and load balancing
• Infrastructure as code (Terraform or CloudFormation)
• AWS IAM and least-privilege policy design
• Removable vendor admin access model and clean access termination
• Encryption and key management (KMS), including key handover to the customer
• AWS Config, Security Hub, Audit Manager, and CloudTrail
• HIPAA Security Rule and HIPAA Omnibus conformance packs
• CIS Benchmark controls
• NIST 800-53 controls
• U.S.-based and available U.S. business hours
• Available through Thanksgiving and year-end holidays
• Passed a healthcare-grade background check
• Accepted the no-PHI delivery model in writing
• Reviewed the SOW scope (no commercials) under NDA
• Confirmed in writing that their portion can be delivered by December 31, 2026
• Contract signed with the hard stop and delivery date written in

Requirements:

• AWS Organizations and account deployment
• Transit Gateway design and deployment
• Inspection and Endpoints VPC design and deployment
• Centralized logging
• Hybrid connectivity between AWS and on-premises (VPN or Direct Connect)
• Shared services and load balancing
• Infrastructure as code (Terraform or CloudFormation)
• AWS IAM and least-privilege policy design
• Removable vendor admin access model and clean access termination
• Encryption and key management (KMS), including key handover to the customer
• AWS Config, Security Hub, Audit Manager, and CloudTrail
• HIPAA Security Rule and HIPAA Omnibus conformance packs
• CIS Benchmark controls
• NIST 800-53 controls