AWS DevSecOps
Posted 3hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
AWS DevSecOps Engineer securing enterprise-scale AWS environments through policy automation, Terraform, and multi-account governance. Designing and rolling out AWS security controls.
Responsibilities:
- Design, author, test, and deploy AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs)
- Implement cloud security controls using Terraform / Infrastructure-as-Code
- Work with AWS Organizations, OUs, and Control Tower/AFT in a multi-account environment
- Develop and manage IAM policies, IAM Access Analyzer, VPC endpoint policies, and resource-based policies
- Protect critical AWS resources including S3, KMS, logging, and other security-sensitive services
- Test policies in sandbox environments, assess blast radius, and support phased production rollouts
- Develop security runbooks and provide knowledge transfer to engineering/operations teams
Requirements:
- Strong hands-on AWS DevSecOps / Cloud Security experience
- Experience with AWS Organizations and multi-account AWS environments
- Hands-on experience with SCPs and IAM policies; RCP experience strongly preferred
- Strong Terraform / IaC experience
- Experience with AWS security controls, IAM, S3, KMS and VPC
- Ability to design, test, troubleshoot, and safely roll out cloud security policies
- AWS Control Tower / Account Factory for Terraform (AFT) preferred
- IAM Access Analyzer preferred
- AWS Certified Security – Specialty preferred
- Experience supporting enterprise-scale AWS environments preferred
- Experience with security automation, governance, runbooks, and knowledge transfer preferred















