<p>AWS security Engineer</p> <ul> <li>Excellent Understanding of AWS Services like IAM, VPC, Key Vault, Logging & other native AWS security services(Security Hub, Config, Inspector, Guardduty) </li><li>Good understanding of Cloud misconfigurations, threats, attacks </li><li>Ability to deploy & configure AWS services & resources using Terraform/Cloud Formation </li><li>Good understanding of gathering security & compliance requirements for AWS </li><li>Good understanding of Cloud misconfigurations , attacks & vulnerabilities </li><li>Must have designed AWS Security Landing Zones, Control Tower </li><li>Excellent understanding of AWS Identity Center, Cognito, SCP Policies </li><li>Excellent understanding of Network Firewall, Shield, WAF, Route53 </li><li>Good experience in Cloud Key Management, Data Protection and Certifcate Management in the cloud </li><li>Good in Architecture Diagrams and Solution Design </li><li>Good understanding of Compliance and GRC </li><li>Technical leadership skills coupled with strong communication skills and analytical skills </li><li>Must have experience in direct customer interaction and stakeholder management. </li><li>Understanding on various compliance frameworks such as ISO 27001, NIST, HIPAA, PCI DSS, GDPR etc </li></ul> <p>Roles & Responsibilities</p> <p>Set up secure cloud infrastructure using Terraform/Cloud Formation</p> <p>Prevent cloud Infra misconfiguration at build time and run time</p> <p>Configure native AWS Security Services</p> <p>Identify opportunities to centralize and simplify security controls and processes</p> <p>Design Secure Lanfing Zones</p> <p>Develop Security Reference Architecture Diagrms for Cloud Security</p> <p>Suggest/Recommend and set-up Cloud Security tools (CSPM, CWPP, CIEM)</p> <p>Independently execute Cloud Security Assessment for customers and develop roadmap to improve their overall Cloud Security Posture</p> <p>Work with Alliance partners for Cloud security tools to create value for customers</p> <p>Work to build Cloud security platforms / labs and execute technical Proof of concept</p> <p>Supporting/reviewing RFP and RFI proposals, Business use cases.</p> <p>Consulting on various Cloud security engagements</p> <p>Good to Have</p> <ul> <li>OPA </li><li>Other Cloud Security GCP, Azure </li><li>DevOps and CI/CD tooling and frameworks </li><li>(GitHub, Jenkins, Ansible, docker container, Kubernetes) and automation abilities </li><li>Certification - AWS Certified Security - Specialty </li></ul> <p>Salary Range- $100,000-$120,000 a year</p> <p>#LI-SP3</p> <p>#LI-VX1</p>