AWS Cloud Security Technical Lead

Testingxperts — United States · Posted ~2 hours ago

Lead Full-time

Skills

AWS Terraform DevSecOps IAM security architecture

🔓 Log in to save this job, tailor your resume & track your apply process — 7 days free, no card needed.

Log in to add to target list

Summary ✨ AI‑Generated

Lead security engineering for large-scale cloud migration and automation platforms. You will design secure architectures, review infrastructure code, and strengthen software supply-chain protection.

Highlights

Lead cloud security initiatives involving automation, infrastructure protection, compliance, and advanced security practices.

Description

We are looking for an experienced AWS Cloud Security Technical Lead to support the Agentic Migration Platform (AMP), an automation and orchestration platform supporting a large-scale VMware-to-AWS Outposts migration. Key Responsibilities Lead security reviews for Terraform modules, automation tools, and platform components.Perform STRIDE-based threat modeling and security architecture reviews.Review AWS IAM, cross-account roles, permission boundaries, trust policies, and OIDC federation.Assess Terraform/IaC security, including module/provider versioning and state-file protection.Integrate and manage SAST/SCA and security scanning within CI/CD pipelines.Triage findings from Checkov, Semgrep, SAST/SCA, Wiz, Astra, and CheckR.Support SBOM, dependency scanning, secrets scanning, and software supply-chain security.Validate security controls for AWS Outposts workloads and golden AMIs.Support SOX, PCI DSS, audit readiness, and AT&T security/CCOE compliance.Provide regular status updates on security reviews, threat models, and security deliverables. Must-Have Experience Strong AWS Cloud Security experience with hands-on implementation.Strong Infrastructure-as-Code (IaC) Security experience, especially Terraform/CloudFormation.Strong DevSecOps and CI/CD pipeline security experience.Hands-on experience with AWS IAM and security architecture.Experience with threat modeling, vulnerability management, and security scanning. Certifications At least one active certification required: AWS Certified Security – SpecialtyAWS Solutions Architect – Professional