Tech Stack

Description

You will design and evolve secure-by-default cloud environments on AWS, building automation, guardrails, and detection capabilities to enable fast and secure development. You'll work at the intersection of security and infrastructure, protecting systems that power AI-driven products worldwide.

Requirements

• 5+ years hands-on experience securing AWS environments (IAM, VPC, KMS, logging, multi-account)
• Proficiency in Python for automation and security integrations
• Experience designing and securing cloud network architectures with least-privilege access at scale
• Practical experience with infrastructure as code (Terraform preferred) and production Kubernetes security

Responsibilities

• Design and evolve secure cloud architectures across AWS, including network segmentation, encryption, IAM, and centralized logging
• Build and enforce secure-by-default infrastructure using Terraform and AWS CloudFormation
• Own and improve access management models with least-privilege policies, temporary access, and cross-account strategies
• Develop cloud detection, monitoring, and alerting with Amazon GuardDuty, CloudTrail, and Security Hub
• Strengthen container and Kubernetes security, including workload isolation, image scanning, runtime protection, and network policies