- New York, New York, United States
- On-site
Design and implement security controls across AWS, AWS GovCloud, customer-hosted clouds and on-premises deployments. Develop secure cloud architecture, including landing zones, service control policies and security boundaries. Harden Kubernetes and EKS environments, including workload identity, network policies and runtime security. Build centralized logging, monitoring, dashboards and detection capabilities across deployments. Develop cloud detection and response workflows, triage cloud security findings and support incident response and recovery. Implement infrastructure-as-code guardrails, policy-as-code, drift detection and continuous compliance automation. Improve deployment pipeline security through artifact signing, admission policies and software supply chain controls. Develop container and base-image security standards, including images that meet applicable FIPS requirements. Partner with engineering to obtain and integrate available security telemetry from customer environments. Support FedRAMP and other federal deployment requirements through technical controls and evidence.
Responsibilities
- Design and implement security controls across AWS, AWS GovCloud, customer-hosted clouds and on-premises deployments.
- Develop secure cloud architecture, including landing zones, service control policies and security boundaries.
- Harden Kubernetes and EKS environments, including workload identity, network policies and runtime security.
- Build centralized logging, monitoring, dashboards and detection capabilities across deployments.
- Develop cloud detection and response workflows, triage cloud security findings and support incident response and recovery.