AWS Cloud security

Role & Responsibilities:

• Design and implement AWS Organizational Governance including Service Control Policies (SCPs), multi-account patterns, and delegated admin setups.
• Build and maintain logging and audit foundations: Org CloudTrail, AWS Config aggregators, S3 log archive hardening, GuardDuty, Security Hub.
• Operate CSPM/CNAPP tooling (e.g., Wiz.io): onboard accounts/resources, tune posture policies, integrate with ticketing and log routing pipelines (Cribl/SIEM).
• Develop Infrastructure as Code (Terraform) modules and reusable patterns with policy-as-code integration and CI scanning.
• Conduct vulnerability and risk prioritization using CVSS, exploit context, asset criticality, and signal sources.
• Automate validation, evidence export, and reporting using Python (boto3), AWS CLI, and shell scripting.
• Manage identity and access: IAM least privilege, cross-account role assumptions, permission boundaries, and automation roles.
• Handle observability and data routing pipelines (Cribl, Firehose, Kinesis).
• Ensure compliance awareness, especially HIPAA safeguard themes (auditability, access control, data protection).
• Design and extract metrics & KPIs: coverage %, MTTR, SLA compliance, control efficacy.

Preferred Candidate Profile:

• Strong experience in AWS Security and Cloud Governance.
• Expertise in Terraform and Python automation for cloud security tasks.
• Deep understanding of IAM, SCPs, CloudTrail, Config, GuardDuty, Security Hub, and CNAPP tools.
• Hands-on experience with CI/CD integration and cloud security pipeline automation.
• Familiarity with compliance frameworks (HIPAA, ISO, SOC) and reporting KPIs.
• Strong problem-solving skills and ability to design reusable security patterns in a multi-account AWS environment.