Cloud Security Controls Engineer

Amazon Web Services, Inc. seeks a Controls Deployment Engineer to design, automate, and deploy security and governance controls across large-scale AWS environments. You will codify controls using Terraform/CloudFormation, integrate them into CI/CD pipelines, and partner with security, compliance, and platform teams to embed guardrails into new and existing workloads. You'll analyze telemetry, optimize control performance, support audits, and document patterns that raise the security and reliability bar. This role suits engineers who thrive in a fast-paced, customer-obsessed culture and enjoy solving complex cloud-scale challenges.

Responsibilities

• Design and deploy automated security and governance controls on AWSImplement controls as code using Terraform or Cloud

• Formation

• Integrate controls into CI/CD pipelines for consistent deployment

• Collaborate with security, compliance, and platform teams on control strategy

• Monitor, test, and tune controls using logs and metrics

• Support audits and compliance evidence gathering

• Develop documentation, runbooks, and reference architectures

• Continuously improve control coverage, performance, and reliability Required Skills

• AWS services (IAM, Cloud

• Trail, Config, Guard

• Duty)

• Infrastructure as Code (Terraform/Cloud

• Formation)

• CI/CD pipelines (Code

• Pipeline, Jenkins, Git

• Hub Actions)

• Python or similar scripting

• Cloud security and compliance (SOC2, ISO 27001)

• Monitoring and logging (Cloud

• Watch, SIEM)

• Linux administration

• Networking and VPC design

• Version control with Git

• Automation and orchestration tools