> Markdown version of [/jobs/ext/2850086-sr-infrastructure-cloud-security-engineer-aws-remote](https://www.wearedevelopers.com/jobs/ext/2850086-sr-infrastructure-cloud-security-engineer-aws-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Infrastructure Cloud Security Engineer - AWS - Remote - **Company:** American Mortgage Consultants, Inc. - **Location:** Santa Fe, NM, United States - **Experience:** Expert - **Salary:** $135,000.0 - $180,000.0 - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cloud Computing Security, Cloud Engineering, Code Review, Continuous Integration, Digital Assets, Identity and Access Management, Information Systems Security Architecture Professional, Python (Programming Language), Key Management, Network Segmentation, Windows PowerShell, Systems Development Life Cycle, Secure Coding, Cloud Platform System, Software Security, Kubernetes, Cybercrime, Terraform, Docker - **Published:** September 11, 2026 - **Apply:** https://dejobs.org/x/x/EA2BBDE667F9435984CFD8329EB7FC23/job/ ## About the Role * Bachelor's degree in a technical field from an accredited college/university, or equivalent job experience. * Minimum of 8+ years of industry and/or relevant experience, typically with 2+ years in an AVP level role or external equivalent. * At least 7 years of direct relevant work experience in cloud security engineering, application/product security or a similar role * Relevant certifications such as CISSP, CEH, GIAC, ISSAP, CISM or other relevant security-focused certifications preferred * Familiarity with cloud security principles and technologies (e.g., AWS and Azure). * Highly motivated self-starter that can manage multiple deliverables independently in a fast-paced environment * Broad knowledge across the security, insider threat, risk management and compliance domains. * Proficiency in scripting and automation (e.g., Python, PowerShell, Terraform) * Familiarity with container security technologies (Docker, Kubernetes). * Have familiarity with infrastructure as code (IaC) tooling * Knowledge of encryption and key management practices. * Excellent risk based problem-solving, analytical, and communication skills. * Ability to work independently and as part of a team. ## Description You will play a pivotal role in safeguarding our organization's sensitive data and infrastructure within the cloud environment. Your responsibilities will include designing, implementing, and maintaining robust security measures to protect against cyber threats. You will collaborate with cross-functional teams to ensure compliance with industry standards and regulations, while also staying abreast of emerging security trends and technologies. Your expertise will be instrumental in mitigating risks and safeguarding our organization's digital assets in cloud platform like AWS and Microsoft Azure., * Help build and define our cloud and application security posture. Enable cyber resilience. Help implement various zero trust initiatives. * Design, implement, and maintain comprehensive security controls for cloud hosted infrastructure, applications and data. * Lead hardening efforts such as IAM, network segmentation, PAM, workload protection, CI/CD integration, container/Kubernetes security, etc. * Evaluate and implement cloud-native and third-party security tooling * Monitor and respond to cloud security incidents and lead root cause analysis in a timely manner * Mature existing AppSec program, including security SDLC, code scanning, SCA, threat modeling, and pen testing. * Partner directly with engineering leaders to bake security into product roadmaps * Design and implement secure coding standards and developer education programs * Support hands-on code review and validation for high-risk or high-impact applications * Develop and implement security policies, standards, and procedures to ensure compliance with industry best practices and regulatory requirements as it relates to cloud engineering. * Stay up-to-date with the latest security trends, threats, and technologies to continuously improve our security posture * Provide guidance and training to internal teams on cloud and AppSec practices * Define KPIs and metrics that make security measurable and transparent * Drive a culture of security across engineering, development, and product teams ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Implementing Feature Environments with AWS and Terraform](https://www.wearedevelopers.com/videos/531-implementing-feature-environments-with-aws-and-terraform) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)