Aws Engineer

Required Qualifications

• 5-8 years of overall IT or security engineering experience, with 3+ years hands-on in AWS infrastructure and AWS security specifically.
• Least-privilege identity design in AWS: IAM, IAM Identity Center and permission sets, roles, service-linked roles, SCPs, and AWS Organizations.
• Network security in AWS: VPC design, segmentation, and traffic controls.
• Encryption and secrets: KMS, Secrets Manager, and key management practices.
• Logging and detection: CloudTrail, Config, GuardDuty, and Security Hub, including finding aggregation and remediation.
• Experience writing AWS Lambda functions and Athena queries to analyze CloudTrail data centrally.
• Infrastructure as Code (Terraform or CloudFormation) for provisioning and enforcing secure configurations.
• CI/CD security: GitHub Actions OIDC, short-lived federated credentials, and elimination of static cloud secrets.
• Remediation ownership: triage, tracking, exception governance, and evidence collection.
• Experience delivering in regulated environments (e.g. PCI DSS, SOC 2, ISO 27001, NIST, FFIEC-aligned programs, FedRAMP, or client-specific control frameworks) with audit-ready evidence expectations.
• Experience working in Agile delivery environments using tools such as Jira, Azure DevOps, Confluence, ServiceNow, GitHub, GitLab, or equivalent.
• Strong written and verbal communication and client-facing delivery skills.