Senior AWS DevOps Security Engineer

Senior AWS DevOps Security Engineer

Job Description

7+ years of experience in cloud engineering or DevOps, with hands-on AWS experience.

Strong understanding of AWS Organizations, SCPs, IAM, AWS Config, and Security Hub.

Proven experience writing IQ scripts (Python, Bash, or other scripting languages).

Familiarity with Infrastructure as Code tools (Terraform, CloudFormation, CDK).

Experience integrating changes into CI/CD pipelines and automation frameworks.

Strong problem-solving and communication skills.

Ability to work independently and collaboratively in distributed teams.

AWS Services, Kubernetes, networking, IAM, security policies, and AWS cost optimization

Requirements

Job Responsibilities

Implement and configure AWS Service Control Policies (SCPs) and AWS Config rules aligned with security best practices.

Create and execute IQ scripts to verify and validate security configurations.

Contribute to and enhance the existing Landing Zone automation scripts (Infrastructure as Code).

Collaborate closely with the AWS ProServe team and Alcon IT stakeholders to align implementation with broader governance and security goals.

Support change control, documentation, and implementation of AWS security configurations in a compliant and traceable way.

Troubleshoot, analyze, and resolve security and configuration issues in the AWS environment.

Contribute to internal best practices and documentation for ongoing operations.