Senior AWS Cloud Security Consultant
On-siteManhattan, New York, United States
Job Summary
Evaluate AWS services before production introduction, identify API and configuration-level security risks, and implement preventive controls using AWS Organizations policies, IAM guardrails, and Rego-based frameworks. Design least-privilege access models within highly regulated environments while enforcing data perimeter architecture through policy-as-code and proactive threat modeling. This role supports critical business platforms where security, compliance, and operational rigor are non-negotiable. The team leverages deep industry expertise across Financial Services, Wealth Management, and Banking to deliver custom transformation solutions.
Required Qualifications
- 8+ years of cloud engineering, cloud security, or infrastructure security experience
- Deep expertise in AWS security architecture and governance
- Demonstrated experience performing API-level threat modeling for AWS services
- Open Policy Agent (OPA)
- Rego policy development
- Policy testing and validation
- AWS IAM
- AWS Organizations
- SCPs and RCPs
- Data perimeter architecture
- Experience designing least-privilege access models in regulated environments
- Strong understanding of cloud security controls, compliance requirements, and enterprise governance frameworks
Desired Qualifications
- Experience with Kivera.io, Cloudflare One, or similar cloud API policy enforcement platforms
- Experience with Regal policy linting and OPA coverage reporting
- Infrastructure-as-Code expertise using Terraform
- GitHub Actions
- OIDC federation
- Policy validation pipelines
- Approval-based deployment models
- Checkov
- Conftest
- Policy Sentry
- Cloudsplaining
- Strong AWS observability experience using: CloudWatch, CloudTrail, VPC Flow Logs
- Amazon EKS security and governance experience
- Experience working directly with AWS Support and Technical Account Managers
- Financial services, banking, capital markets, or other highly regulated industry experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.