Senior AWS DevOps Security
Engineer
<\/p>
Job Description<\/span><\/b>
<\/p>
7+ years of experience
in cloud engineering or DevOps, with hands -on AWS experience.<\/span>
<\/p>
Strong understanding
of AWS Organizations, SCPs, IAM, AWS Config, and Security Hub.<\/span>
<\/p>
Proven experience
writing IQ scripts (Python, Bash, or other scripting languages).<\/span>
<\/p>
Familiarity with
Infrastructure as Code tools (Terraform, CloudFormation, CDK).<\/span>
<\/p>
Experience integrating
changes into CI/CD pipelines and automation frameworks.<\/span>
<\/p>
Strong problem -solving
and communication skills.<\/span>
<\/p>
Ability to work
independently and collaboratively in distributed teams.<\/span>
<\/p>
AWS Services,
Kubernetes, networking, IAM, security policies, and AWS cost optimization<\/span>
<\/p>
Job
Responsibilities<\/span><\/b>
<\/p>
Implement and
configure AWS Service Control Policies (SCPs) and AWS Config rules aligned with
security best practices.<\/span>
<\/p>
Create and execute IQ
scripts to verify and validate security configurations.<\/span>
<\/p>
Contribute to and
enhance the existing Landing Zone automation scripts (Infrastructure as Code).<\/span>
<\/p>
Collaborate closely
with the AWS ProServe team and Alcon IT stakeholders to align implementation
with broader governance and security goals.<\/span>
<\/p>
Support change
control, documentation, and implementation of AWS security configurations in a
compliant and traceable way.<\/span>
<\/p>
Troubleshoot, analyze,
and resolve security and configuration issues in the AWS environment.<\/span>
<\/p>
Contribute to internal
best practices and documentation for ongoing operations.<\/span>
<\/p>
<\/span>
<\/p>