AWS Network Security Engineer- 7+ yrs- New York, New York- Onsite

Job Description :

AWS Advanced Networking: Direct experience configuring Transit Gateway (TGW) hubs and routing, AWS Network Firewall (NFW), Egress/NAT, Ingress (PrivateLink, WAF, ALB), and Route 53 Resolvers/PHZ. Identity & Access Management (IAM): Hands-on implementation of IAM Identity Center, Entra GCC federation (SAML + SCIM), Permission Sets, Permission Boundaries, and cross-account IAM roles. AWS Security Services (Org-Wide): Automated deployment via Terraform of Security Hub, GuardDuty, Macie, and AWS Config Conformance Packs. FIPS & Encryption Hardening: Expertise enforcing FIPS 140 HSMs via KMS, AES-256 encryption at rest, and TLS 1.2+ FIPS in transit.Certifications: AWS Certified Security – Specialty or AWS Certified Advanced Networking – Specialty.Compliance & Incident Response: Understanding of DFARS 7012 72-hour reporting automation workflows and forensic readiness. Third-Party Security Tools: Experience integrating WAF/API security solutions like Cequence.