Principal AWS Cloud Security Engineer

I.T. Solutions, Inc. is seeking a Principal Cloud Security Engineer to integrate security into the engineering process rather than treating it as a separate checkpoint. This role involves designing AWS security patterns, building Terraform modules, and implementing preventive controls to ensure safe cloud operations.

Responsibilities:

• Design AWS multi-account, organization, and guardrail patterns that make the secure path the easy one
• Build and own a library of Terraform modules and policy-as-code that engineering teams adopt across the company
• Implement preventive controls, including SCPs, deployment-time policy validation, and drift detection, for high-risk cloud actions, in the code paths where work already happens
• Build logging integrity and tamper resistance into CloudTrail, telemetry pipelines, and core monitoring; define what good cloud telemetry looks like for downstream detection
• Partner with Platform and Architecture on identity, networking, EKS, and serverless patterns. Work with Security Operations to turn cloud signals into useful detections
• Make architecture decisions visible through design docs, pull requests, and reference implementations others can read and copy

Requirements:

• Must be US Citizen because of government project
• 8+ years across software engineering, platform engineering, SRE, or cloud security, with substantial hands-on AWS work in multi-account environments
• Production-quality code in at least one of Go, Python, TypeScript, C#, or Java. You think about security problems as software problems
• Deep Terraform: reusable modules, tested patterns, and an opinion about how IaC should be structured at scale
• Hands-on experience with policy-as-code, preventive guardrails, and securing EKS and serverless workloads
• Experience building detective and preventive controls for cloud control planes and logging integrity
• Comfort working through pull requests and design reviews with engineering teams, not only with security teams
• SIEM/XDR integration experience; familiarity with Palo Alto or Prisma
• CI/CD security patterns and developer-enablement work
• Securing AI/GenAI services, internal copilots, or agentic workflows in cloud environments