Senior Cloud Security Engineer (AWS)

Your tasks

We are seeking a highly skilled Senior Cloud Security Engineer with deep, architect-level AWS expertise and a strong software engineering background. This is a hands-on, highly technical security engineering role focused on designing, building, and automatingcloud-native security solutions exclusively within AWS environments.

You will be responsible for designing secure AWS landing zones, enforcing container/Kubernetes security, and writing Infrastructure as Code (IaC) to embed security automation.

1. AWS Cloud Security Architecture &Governance

• Design and implement enterprise-grade AWS security architectures, multi-account landing zone structures (Control Tower / Organisations), and identity isolation models.
• Operationalise native AWS security services, including IAM, KMS, CloudTrail, Config, GuardDuty, Security Hub, Inspector, and AWS WAF.
• Enforce Zero Trust patterns, strict IAM policies, and robust data encryption at rest and in transit across all AWS services.

2. Infrastructure as Code (IaC) &Security Engineering

• Author, maintain, and enforce security policies across clean, modular Terraform templates.
• Build custom security automation, automated remediation scripts, and tooling using Python.
• Secure Amazon Elastic Kubernetes Service (EKS) infrastructure and container runtime environments, ensuring strict pod security, network policies, and secrets management.

3. Vulnerability Mitigation &Remediation

• Proactively analyze, prioritize, and automate the remediation of cloud security risks and misconfigurations across AWS landing zones.
• Deploy and manage Cloud Native Application Protection Platforms (CNAPP / CSPM / CWPP) to enforce continuous cloud posture compliance.

Requirements

What We Are Looking For (Ideal CandidateProfile)

• Strong IaC & Automation Skills: Hands-on proficiency with Terraform for infrastructure deployment and a solid software engineering foundation in Python.
• AWS Security Architecture Expertise: Proven track record designing landing zones, account segregation strategies, and implementing AWS-native security services (e.g., AWS Control Tower, Organisations, IAM, KMS, GuardDuty, Security Hub, Config, CloudTrail, WAF).
• Kubernetes Security: Solid hands-on expertise in securing containerised workloads and Kubernetes clusters (EKS), equivalent to Certified Kubernetes Security Specialist (CKS) knowledge.
• Relevant Certifications (A plus, but not a guarantee):
• AWS Certified Solutions Architect – Professional; AWS Certified Security – Speciality
• Certified Kubernetes Security Specialist (CKS)

Who Should NOT Apply (Strict Exclusion Criteria) To ensure alignment during the interview process, please review these exclusions before applying:

• Multi-Cloud / Non-AWS Primary Experience: We operate exclusively on AWS. Candidates without deep, hands-on AWS architect-level experience will not be considered.
• Management & Non-Technical Roles: Candidates whose primary experience is in managing security teams, P&L management, or SLA/vendor governance.
• SIEM, SecOps, GRC & VAPT: Candidates limited to SOC operations, SIEM monitoring, GRC compliance auditing, or standard VAPT/pen-testing activities.
• DevOps / CI-CD Scanners Only: Candidates whose cloud security experience is limited to configuring SAST, DAST, or SCA tools inside standard CI/CD pipelines.

Minimum Requirements Education: Degree or Diploma in Computer Science, Information Technology, Computer/Electronics Engineering, or a related technical discipline

Experience: Minimum of 4+ years of hands-on experience in cloud security engineering, AWS architecture hardening, and automated risk remediation.

Technical Stack

• Cloud: Deep AWS experience (Architect-level knowledge).

• IaC & Code: Advanced Terraform and Python.

Containers: Hands-on EKS / Kubernetes security.