AWS Security Engineer - INTL India

We are looking to hire an AWS Cloud Security Engineer to support a platform hardening initiative focused on strengthening the security posture of AWS CDK deployments. This role will primarily focus on AWS CDK (TypeScript) development while partnering closely with application teams and security stakeholders to gather requirements, identify gaps, and implement secure deployment practices across a multi-account AWS environment. The ideal candidate will help drive the effort from planning through implementation, working across engineering and security teams to enhance deployment controls, governance, and overall platform security., * AWS CDK (TypeScript) - Develop and support secure AWS CDK solutions (majority of the role)

• GitHub Actions - Build and maintain GitHub Actions pipelines supporting AWS CDK deployments.

• GitHub Security - Support and enhance GitHub-to-AWS OIDC connectivity, partnering with security teams to implement deployment security controls and policy restrictions for AWS CDK deployments.

• Least-Privilege Access Controls - Implement and maintain IAM roles, policies, and policy conditions in support of least-privilege access models.

• AWS Permission Boundaries & SCPs - Implement Permission Boundaries and support governance controls utilizing AWS Service Control Policies (SCPs).

• AWS Control Tower - Support and maintain secure deployment practices across AWS Control Tower-managed, multi-account environments.

• Requirements & Planning - Partner with application teams to understand requirements, identify gaps, define technical tasks, and drive implementation efforts.

• Project Leadership - Serve as a senior technical resource, leading discussions, coordinating with stakeholders, and driving the project from planning through implementation.

• Extensive hands-on experience developing and deploying infrastructure using AWS CDK (TypeScript)

• Experience building and maintaining deployment pipelines using GitHub Actions

• Experience implementing and securing OIDC-based authentication between GitHub Actions and AWS for CDK deployments (including working with security teams to evaluate risks, implement mitigations, and enforce deployment security controls)

• Strong understanding of AWS IAM roles, policies, policy conditions, and least-privilege access models

• Experience implementing or supporting AWS Permission Boundaries, with an understanding of how they interact with IAM policies and AWS Service Control Policies (SCPs)

• Experience working within AWS Control Tower-managed environments and multi-account AWS architectures

• Experience partnering with application teams and security teams to design, review, and implement cloud security controls and deployment guardrails N/A