AWS Security & Cloud Governance Specialist

Role & Responsibilities:

• Design and implement AWS Organizational Governance including Service Control Policies (SCPs), multi-account patterns, and delegated admin setups.
  
• Build and maintain logging and audit foundations: Org CloudTrail, AWS Config aggregators, S3 log archive hardening, GuardDuty, Security Hub.
  
• Operate CSPM/CNAPP tooling (e.g., Wiz.io): onboard accounts/resources, tune posture policies, integrate with ticketing and log routing pipelines (Cribl/SIEM).
  
• Develop Infrastructure as Code (Terraform) modules and reusable patterns with policy-as-code integration and CI scanning.
  
• Conduct vulnerability and risk prioritization using CVSS, exploit context, asset criticality, and signal sources.
  
• Automate validation, evidence export, and reporting using Python (boto3), AWS CLI, and shell scripting.
  
• Manage identity and access: IAM least privilege, cross-account role assumptions, permission boundaries, and automation roles.
  
• Handle observability and data routing pipelines (Cribl, Firehose, Kinesis).
  
• Ensure compliance awareness, especially HIPAA safeguard themes (auditability, access control, data protection).
  
• Design and extract metrics & KPIs: coverage %, MTTR, SLA compliance, control efficacy.
  

Preferred Candidate Profile:

• Strong experience in AWS Security and Cloud Governance.
  
• Expertise in Terraform and Python automation for cloud security tasks.
  
• Deep understanding of IAM, SCPs, CloudTrail, Config, GuardDuty, Security Hub, and CNAPP tools.
  
• Hands-on experience with CI/CD integration and cloud security pipeline automation.
  
• Familiarity with compliance frameworks (HIPAA, ISO, SOC) and reporting KPIs.
  
• Strong problem-solving skills and ability to design reusable security patterns in a multi-account AWS environment.