Senior AWS Cloud Security Engineer - Remote / Telecommute

Job Title: Senior AWS Cloud Security Engineer - Remote / Telecommute

Job Location: Raleigh, NC

Job Type: Contract

Pay Range: $51.00hr - $56.00hr

Job Overview:

The candidate will design, implement, and manage AWS IAM and IAM Identity Center solutions across enterprise multi-account AWS environments. Responsibilities include developing IAM policies, permission boundaries, trust relationships, RBAC, permission sets, and least-privilege access models. The successful candidate will manage AWS Organizations governance including SCPs, RCPs, tag policies, backup policies, guardrails, and account lifecycle controls. Additionally, the role involves configuring and supporting AWS Control Tower, AWS Config, GuardDuty, CloudTrail, and Security Hub for governance and security posture monitoring, while building event-driven automation using Python, Lambda, Step Functions, EventBridge, Boto3, and APIs. The candidate will support governance-as-code and IAM automation through Git, CI/CD pipelines, CloudFormation, CDK, or Terraform with automated validation.

Requirements:

• Deep expertise in AWS IAM, IAM Identity Center, AWS Organizations, Control Tower, IAM policy language, evaluation logic, cross-account access, and permission boundaries.
• Hands-on experience with AWS Config, GuardDuty, CloudTrail, Security Hub, compliance monitoring, and remediation automation.
• Strong Python development skills with AWS Lambda, Step Functions, EventBridge, Boto3, APIs, and event-driven automation frameworks.
• Experience with Git-based source control, CI/CD pipelines, version-controlled policies, permission sets, and governance configurations.

Preferred Qualifications / Certifications:

• Experience implementing enterprise AWS Landing Zones, account vending, onboarding, and governance automation across AWS Organizations.
• Hands-on IAM Identity Center permission set management and account assignment automation through CI/CD pipelines.
• Familiarity with Terraform, CloudFormation, AWS CDK, GitOps approaches, compliance frameworks, and identity governance patterns.
• Preferred certifications include AWS Solutions Architect Associate/Professional, AWS Security Specialty, and AWS DevOps Engineer Professional.

Soft Skills:

• Strong problem-solving skills, independent ownership, and the ability to communicate effectively with stakeholders.
• Ability to translate security and governance requirements into scalable AWS solutions.

== ==

• Medical, Dental, and Vision Insurance
• 401(k) Retirement Plan
• Health Savings Account (HSA)
• Disability Insurance (Short-Term and Long-Term)
• Life and AD&D Insurance
• Paid Sick Leave (where required by applicable state or local law)
• Supplemental Insurance Plans
• Identity Theft Protection
• Pet Insurance
• Employee Wellness Programs
• Employee Assistance Program (EAP)
• Career Growth and Professional Development Opportunities