Role summary Hands-on security automation for AWS delivery. Build secure-by-default CDK constructs and CloudFormation templates, wire them into CI/CD, and enforce compliance checks that map to CJIS and NIST. Azure support is a future consideration, not a core day-one duty. Scope boundaries Does not own enterprise AWS Organizations or SCP operations.Designs and builds reference guardrails and enforcement patterns that can be deployed by enterprise teams. Focuses on preventive controls and complia