AWS Cloud Security Infrastructure Engineer

abra is hiring an AWS Cloud Security Infrastructure Engineer to secure and maintain a large-scale AWS environment. The role focuses on cloud security controls, identity and permissions, infrastructure as code, networking, cloud migrations, and operational troubleshooting.

Responsibilities

• Operate, maintain, implement, and troubleshoot cloud security systems and infrastructure
• Implement security controls and secure configurations across AWS services and infrastructure
• Work with AWS native security services, including IAM, KMS, GuardDuty, Security Hub, WAF, and CloudTrail
• Manage cloud identities, permissions, resource policies, cross-account access, and privilege controls
• Develop and maintain security infrastructure and controls as code using Terraform or equivalent IaC technologies
• Implement security controls across IAM, secrets and key management, service hardening, logging and visibility, and security automation
• Work with AWS networking components, including VPCs, Security Groups, routing, subnetting, and external connectivity
• Support cloud migration projects from on-premises environments to AWS
• Participate in projects from planning and design through implementation and production
• Troubleshoot complex cloud security, networking, and infrastructure issues
• Create and maintain technical documentation and operational procedures

Skills

• At least **3 years of experience in Information Security**, or relevant academic/professional training combined with the required security experience
• At least **2 years of hands-on Information Security experience in an organization with 1,000+ users**
• At least **2 years of experience within the last 5 years** in Cloud Security, DevOps, or Cloud Infrastructure Engineering
• At least **2 years of hands-on experience with AWS**, including multi-account environments
• At least **2 years of experience with cloud security architecture and AWS security services**, such as IAM, KMS, GuardDuty, Security Hub, WAF, and CloudTrail, or equivalent technologies
• At least **2 years of hands-on experience with Terraform or equivalent IaC technologies**, including writing and maintaining infrastructure code
• Experience with cloud identity and permission models, including resource policies, cross-account trust, permission boundaries, and privilege escalation paths
• Experience migrating infrastructure from **on-premises environments to AWS**
• Experience implementing cloud security controls in at least **3 areas**, such as IAM, secrets/key management, service hardening, organizational policies, logging and visibility, and automated response
• At least 2 years of experience with cloud networking and communication protocols, including **VPC, Security Groups, routing, and external exposure**
• Strong understanding of networking concepts and troubleshooting, including the OSI model, routing protocols, subnetting, and routing priorities
• Knowledge of **Windows and Linux** environments
• Native-level Hebrew and strong English communication skills
• 3 years of experience building or expanding **AWS Landing Zones / multi-account AWS environments**
• Hands-on experience with **Firewalls, SASE, NAC, IPSEC, and VPN** technologies
• 3 years of scripting and automation experience using **Python, Bash, or similar technologies**
• AWS professional certification such as **AWS Certified Security – Specialty, Solutions Architect – Professional, or DevOps Engineer – Professional**

Company Overview