AWS Security Engineer/Migrations

• Lead end-to-end migration of on-prem network infrastructure (firewalls, VPNs, servers) into AWS, replacing legacy hardware with cloud-native equivalents
• Architect AWS networking: VPCs, subnets, routing, Transit Gateway, VPN connections, and hybrid connectivity between on-prem and cloud environments
• Deploy and manage AWS security services including Security Groups, Network Firewall, WAF, Shield, GuardDuty, and IAM
• Implement AWS load balancing (ALB, ELB, Gateway Load Balancer) and CloudWatch observability for migrated infrastructure
• Own cloud security posture across AWS environments, ensuring compliance with SOX, PCI, and other cybersecurity frameworks
• Lead incident response and forensic investigations for cloud-based security events

TOP PRIORITY: Requirement Notes (Candidate Job description below) : We are seeking an experienced (10+ Years) Cloud Security Engineer with a proven track record leading the migration of on-premises network infrastructure into AWS. This role is built for a cloud-native security professional, not a traditional network engineer, who has hands-on experience migrating servers, firewalls, VPNs, and load balancers into AWS and re-architecting them using AWS-native services. The ideal candidate has already led this exact type of migration and can speak directly to the tradeoffs, architecture decisions, and security posture required to do it at scale.

** THIS IS A SENIOR PURE AWS CLOUD SECURITY POSITION (NOT NETWORK ENGINEER WITH SOME SECURITY) AND CANDIDATES NEED TO HAVE RECENT MIGRATION EXPERIENCE.

CANDIDATES MUST HAVE RECENT PROJECTS IN THE NY/NJ AREA AND BE WITHIN A ONE TO TWO HOUR COMMUTE TO THE DATA CENTER IN SECAUCUS, NJ. CANDIDATES MUST COME FROM VERY LARGE ENTERPRISES AND BE FOCUSED ON CLOUD SECURITY ARCHITECTURE. THE MANAGER WANTS TO SEE CERTIFICATIONS, AND THIS POSITION WILL BE HYBRID WITH OCCASIONAL TRIPS (FEW TIMES A QUARTER) TO THE DATA CENTER IN SECAUCUS.

**CANDIDATES MUST HAVE GOOD TENURE AND/OR LONG PROJECTS. CANDIDATES WITH RECENT LOCAL PROJECTS HIGHLY PREFERRED. - NO RELOCATION, We are seeking an experienced Cloud Security Engineer (10 years minimum) with a proven track record leading the migration of on-premises network infrastructure into AWS. This role is built for a cloud-native security professional, not a traditional network engineer, who has hands-on experience migrating servers, firewalls, VPNs, and load balancers into AWS and re-architecting them using AWS-native services. The ideal candidate has already led this exact type of migration and can speak directly to the tradeoffs, architecture decisions, and security posture required to do it at scale., * 5+ years working within AWS, with direct ownership of cloud security architecture

• Proven experience migrating on-prem network infrastructure (firewalls, VPNs, servers) into AWS, approached from the cloud side
• Proficiency in Infrastructure-as-Code: Terraform, Ansible, and Python automation
• Familiarity with CI/CD pipelines and GitHub workflows
• Working knowledge of Palo Alto or equivalent firewall technology, as it maps to cloud firewall concepts
• Comfortable in Linux/RHEL environments and command-line troubleshooting
• GCP experience a plus