Senior Cloud Security Engineer (AWS)

We are seeking a highly skilled Senior Cloud Security Engineer with deep, architect-level AWS expertise and a strong software engineering background. This is a hands-on, highly technical security engineering role focused on designing, building, and automatingcloud-native security solutions exclusively within AWS environments.

You will be responsible for designing secure AWS landing zones, enforcing container/Kubernetes security, and writing Infrastructure as Code (IaC) to embed security automation.

What We Are Looking For (Ideal CandidateProfile)

• Strong IaC & Automation Skills: Hands-on proficiency with Terraform for infrastructure deployment and a solid software engineering foundation in Python.
• AWS Security Architecture Expertise: Proven track record designing landing zones, account segregation strategies, and implementing AWS-native security services (e.g., AWS Control Tower, Organisations, IAM, KMS, GuardDuty, Security Hub, Config, CloudTrail, WAF).
• Kubernetes Security: Solid hands-on expertise in securing containerised workloads and Kubernetes clusters (EKS), equivalent to Certified Kubernetes Security Specialist (CKS) knowledge.
• Relevant Certifications (A plus, but not a guarantee):
• AWS Certified Solutions Architect – Professional; AWS Certified Security – Speciality
• Certified Kubernetes Security Specialist (CKS)

Who Should NOT Apply (Strict Exclusion Criteria)

To ensure alignment during the interview process, please review these exclusions before applying:

• Multi-Cloud / Non-AWS Primary Experience: We operate exclusively on AWS. Candidates without deep, hands-on AWS architect-level experience will not be considered.
• Management & Non-Technical Roles: Candidates whose primary experience is in managing security teams, P&L management, or SLA/vendor governance.
• SIEM, SecOps, GRC & VAPT: Candidates limited to SOC operations, SIEM monitoring, GRC compliance auditing, or standard VAPT/pen-testing activities.
• DevOps / CI-CD Scanners Only: Candidates whose cloud security experience is limited to configuring SAST, DAST, or SCA tools inside standard CI/CD pipelines.

Key Responsibilities

1. AWS Cloud Security Architecture &Governance

• Design and implement enterprise-grade AWS security architectures, multi-account landing zone structures (Control Tower / Organisations), and identity isolation models.
• Operationalise native AWS security services, including IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, and AWS WAF.
• Enforce Zero Trust patterns, strict IAM policies, and robust data encryption at rest and in transit across all AWS services.

2. Infrastructure as Code (IaC) &Security Engineering

• Author, maintain, and enforce security policies across clean, modular Terraform templates.
• Build custom security automation, automated remediation scripts, and tooling using Python.
• Secure Amazon Elastic Kubernetes Service (EKS) infrastructure and container runtime environments, ensuring strict pod security, network policies, and secrets management.

3. Vulnerability Mitigation &Remediation

• Proactively analyze, prioritize, and automate the remediation of cloud security risks and misconfigurations across AWS landing zones.
• Deploy and manage Cloud Native Application Protection Platforms (CNAPP / CSPM / CWPP) to enforce continuous cloud posture compliance.

Requirements & Qualifications

Minimum Requirements

Education: Degree or Diploma in Computer Science, Information Technology, Computer/Electronics Engineering, or a related technical discipline

Experience: Minimum of 4+ years of hands-on experience in cloud security engineering, AWS architecture hardening, and automated risk remediation.

Technical Stack:

• Cloud: Deep AWS experience (Architect-level knowledge).

• IaC & Code: Advanced Terraform and Python.

  Containers: Hands-on EKS / Kubernetes security.

Skills

Terraform, Computer Engineering, Cloud Governance, Template Creation, IAM, Architect, Data Encryption, Infrastructure as Code (IaC), Computer Science, AWS SDK, Risk Mitigation, Google Cloud, Education, System Security Policies, Security Architecture Design, Technical Infrastructure