The Senior Cloud Security Engineer will support a large-scale migration of on-premises applications and infrastructure to AWS. This role will assess migrating workloads, identify security risks, recommend modernization opportunities, and collaborate with Cloud Engineering teams to strengthen cloud security.
The ideal candidate will have strong AWS cloud security experience, expertise in Identity and Access Management (IAM), Infrastructure as Code (IaC), network security, and vulnerability management. The engineer will help establish reusable security controls, standardized security practices, and sustainable cloud security solutions across the migration program.
Partner with application teams to assess application architecture, security requirements, and migration readiness.
Support security-related migration activities and coordinate security requirements with application owners.
Submit and coordinate firewall, access, tooling, and policy exception requests to ensure compliance with established security requirements.
Assist in application architecture reviews and develop solutions to address security concerns in collaboration with IT teams and vendors.
Conduct security assessments of applications and infrastructure migrating to AWS.
Review workload architecture, network connectivity, privileged access, service accounts, authentication, and authorization models.
Assess network security controls, including security groups, firewall rules, network segmentation, and application communication flows.
Evaluate vulnerability management processes, patching practices, operating system hardening, and security configurations.
Review encryption, data protection, security logging, monitoring, and threat detection capabilities.
Identify security risks, technical debt, and opportunities to modernize applications and infrastructure during migration.
Differentiate application-specific security findings from recurring or platform-wide security issues.
Collaborate with Cloud Engineering teams to improve reusable Terraform modules, Infrastructure-as-Code standards, IAM frameworks, security guardrails, monitoring solutions, and security policies.
Work cross-functionally with Cybersecurity Engineering, Enterprise Architecture, Risk and Governance, Application Teams, Network Engineering, and systems integration partners.
Establish ownership and remediation plans for security findings that cannot be resolved during migration.
Track recurring security issues and recommend platform-level improvements to strengthen overall security maturity.
Apply AWS Well-Architected Framework principles and established security standards to cloud migration activities.
Drive continuous improvement initiatives to make future migrations more secure, standardized, and operationally efficient.
Bachelor's degree in Information Technology or a related field, or an equivalent combination of education and relevant work experience.
Minimum of 5 years of overall IT and security experience.
Hands-on experience with AWS Cloud Security and cloud migration programs.
Strong understanding of Identity and Access Management (IAM), Role-Based Access Control (RBAC), and privileged access management.
Experience with Infrastructure as Code (IaC), preferably Terraform.
Experience working with security applications, application owners, and vendors to identify and resolve security issues.
Knowledge of cloud networking, firewalls, AWS security groups, and network segmentation.
Experience with vulnerability management, operating system hardening, and security monitoring.
Familiarity with security logging, SIEM integration, threat detection, and incident response processes.
Understanding of cloud governance, risk management, and security compliance frameworks.
Strong collaboration skills and the ability to work effectively with engineering, architecture, security, and application teams.
