Talent.com
AWS Cloud Security & Compliance Engineer
AWS Cloud Security & Compliance EngineerGlobal Applications Solution • Charlotte, NC, United States
AWS Cloud Security & Compliance Engineer

AWS Cloud Security & Compliance Engineer

Global Applications Solution • Charlotte, NC, United States
20 hours ago
Job type
  • Full-time
Job description

We are seeking an experienced AWS Cloud Security & Compliance Engineer to own the security and governance of our AWS infrastructure. You will design, implement, and maintain controls that ensure least-privilege access, data protection, auditability, and continuous compliance with ISO 27001 and SOC 1 / 2 requirements.

This is a hands-on role combining cloud architecture, IAM governance, security automation, and compliance documentation .

Responsibilities :

AWS Security & Access Management

  • Design and enforce IAM policies, roles, and SCPs using the principle of least privilege.
  • Implement AWS Organizations, Control Tower, and GuardDuty, Security Hub, Config, and CloudTrail for centralized governance.
  • Manage MFA, SSO (AWS IAM Identity Center), and just-in-time access workflows.
  • Conduct regular privilege access reviews and automate user / role lifecycle management.

Compliance & Data Governance

  • Lead ISO 27001 and SOC 1 / 2 control implementation (e.g., A.9, A.12, SC-13, PI-7).
  • Own risk assessments, control evidence collection, and audit preparation.
  • Develop and maintain data classification, encryption (KMS, SSE), and data residency policies.
  • Ensure PCI DSS alignment for payment data flows (in-scope systems).
  • Security Automation & Monitoring

  • Build Infrastructure as Code (IaC) security using Terraform or similar tools.
  • Automate compliance checks via AWS Config Rules, Security Hub, and custom Lambda scripts.
  • Respond to and triage findings from GuardDuty, Inspector, Macie, and third-party scanners.
  • Documentation & Reporting

  • Maintain System Security Plan (SSP), Risk Register, and control matrices.
  • Prepare audit-ready evidence (logs, configs, access reports).
  • Train engineering teams on secure AWS practices.
  • Required Qualifications :

  • 10+ years in cloud infrastructure; 5+ years in cloud security; 3+ years focused on AWS.
  • Hands-on experience with :
  • AWS IAM, Organizations, SCPs, KMS, CloudTrail, Config, Security Hub
  • Terraform / CloudFormation for secure infrastructure
  • ISO 27001 and SOC 2 control frameworks
  • Active AWS certifications : Security Specialty or Solutions Architect Professional (required).
  • Experience supporting external audits (SOC 2 Type II, ISO 27001).
  • Strong understanding of encryption at rest / transit, network security (VPC, NACLs, WAF), and secrets management.
  • Create a job alert for this search

    Aws Cloud Engineer • Charlotte, NC, United States

    Related jobs
    Senior ServiceNow Security Operations Engineer

    Senior ServiceNow Security Operations Engineer

    Southern New Hampshire University • Charlotte, NC, United States
    Full-time
    Southern New Hampshire University is a team of innovators.Individuals who believe in progress with purpose.Since 1932, our people-centered strategy has defined us - and helped us grow a team that n...Show more
    Last updated: 5 days ago • Promoted
    Cloud Security Remediation Engineer

    Cloud Security Remediation Engineer

    AIG • Charlotte, NC, United States
    Full-time
    At AIG, we are reimagining the way we help customers to manage risk.Join us as a Cloud Security Remediation Engineer to play your part in that transformation. It’s an opportunity to grow your skills...Show more
    Last updated: 30+ days ago • Promoted
    Infrastructure Engineer

    Infrastructure Engineer

    TEKsystems • Fort Mill, SC, United States
    Full-time
    UCS experience - Cisco Intersight is ideal.Data Center stability with DIMM.This Senior System Engineer will possess technical expertise and engineering skills and is considered a leading subject ma...Show more
    Last updated: 9 days ago • Promoted
    Windows Systems Engineer

    Windows Systems Engineer

    TEKsystems • Rock Hill, SC, United States
    Full-time
    TEKsystems is currently looking for a Windows Engineer to support new platform builds, application onboarding, security remediation requirements, CIS hardening, patch automation, GPO baselining, an...Show more
    Last updated: 15 hours ago • Promoted • New!
    Infrastructure Engineer (VMware)

    Infrastructure Engineer (VMware)

    TEKsystems • Rock Hill, SC, United States
    Full-time
    MUST WORK ONSITE 2 DAYS A WEEK.TEKsystems is currently looking for an VMWare Engineer that has technical expertise and engineering skills and is considered a leading subject matter expert for desig...Show more
    Last updated: 15 hours ago • Promoted • New!
    Cloud Security Engineer

    Cloud Security Engineer

    Concord IT Systems • Charlotte, NC, United States
    Full-time
    Job Title : Cloud Security Engineer.Experience with DevOps / devsecops.Experience with scripting languages (e.Threat Modeling & Data Encryption exp. Years in Cloud (Azure / AWS / GCP) - multiple cloud exp...Show more
    Last updated: 2 days ago • Promoted
    Network Engineer

    Network Engineer

    TEKsystems • Fort Mill, SC, United States
    Full-time
    Seeking a Network Engineer for our customer's Infrastructure and Operations organization.This Engineer will possess technical expertise and engineering skill which allows her / him to be grow into a ...Show more
    Last updated: 15 hours ago • Promoted • New!
    Head of Cloud Security Automation

    Head of Cloud Security Automation

    Truist Inc • Charlotte, NC, United States
    Full-time +2
    The position is described below.If you want to apply, click the Apply Now button at the top or bottom of this page.After you click Apply Now and complete your application, you'll be invited to crea...Show more
    Last updated: 5 days ago • Promoted
    Cloud Engineer

    Cloud Engineer

    Re Focus LLC • Charlotte, NC, United States
    Full-time
    Quick Apply
    Top 3 Must Haves • Scripting experience (Python preferred) < / ...Show more
    Last updated: 12 days ago
    Software Engineer - Java / Angular

    Software Engineer - Java / Angular

    Dexian - DISYS • Harrisburg, NC, US
    Full-time
    In this contingent resource assignment, you may : Consult on complex initiatives with broad impact and large-scale planning for Software Engineering. Review and analyze complex multi-faceted, larger ...Show more
    Last updated: 23 days ago • Promoted
    Cloud Network Engineer

    Cloud Network Engineer

    TEKsystems • Fort Mill, SC, United States
    Full-time
    Fort Mill, SC - Hybrid - No C2C • •Cloud Network Engineer - Job Description • We are seeking a •Network Engineer • to join our Infrastructure and Operations team. This role requires strong technical ...Show more
    Last updated: 15 hours ago • Promoted • New!
    PLC Controls Engineer- Level II

    PLC Controls Engineer- Level II

    DivIHN Integration Inc • Newton, NC, US
    Permanent
    DivIHN (pronounced “divine”) is a CMMI ML3-certified Technology and Talent solutions firm.Driven by a unique Purpose, Culture, and Value Delivery Model, we enable meaningful connections between tal...Show more
    Last updated: 26 days ago • Promoted
    U.S. Border Patrol Agent

    U.S. Border Patrol Agent

    U.S. Customs and Border Protection • Kings Mountain, North Carolina, United States
    Full-time
    Customs and Border Protection (CBP) offers those interested in a career in law enforcement an exceptional opportunity to work with an elite team of highly trained professionals whose camaraderie, p...Show more
    Last updated: 30+ days ago • Promoted
    VP, FinOps Engineering

    VP, FinOps Engineering

    LPL Financial • Fort Mill, SC, US
    Full-time
    Join us as a VP, FinOps, where you will oversee the financial operations of our cloud computing services in AWS & Azure and on-prem capacity management. In this pivotal role, you will leverage your ...Show more
    Last updated: 30+ days ago • Promoted
    Lead Information Security Engineer - Palo Alto Firewalls

    Lead Information Security Engineer - Palo Alto Firewalls

    Wells Fargo • Charlotte, NC, United States
    Full-time
    Wells Fargo is seeking a Lead Information Security Engineer - Palo Alto Firewalls to join our Chief Technology Office (CTO). Learn more about the career areas and business divisions at wellsfargojob...Show more
    Last updated: 5 days ago • Promoted
    Insurance Agent (Base salary + Uncapped commissions)

    Insurance Agent (Base salary + Uncapped commissions)

    Comparion Insurance Agency • Denver, North Carolina, United States
    Full-time
    Schedule : Full-Time Salary Range : USD $32000.Job Category : Sales - Comparion The typical starting salary range for this role is determined by a number of factors including skills, experience, educa...Show more
    Last updated: 2 days ago • Promoted
    Border Patrol Agent

    Border Patrol Agent

    U.S. Customs and Border Protection • Sharon, South Carolina, United States
    Full-time
    Customs and Border Protection (CBP) offers those interested in a career in law enforcement an exceptional opportunity to work with an elite team of highly trained professionals whose camaraderie, p...Show more
    Last updated: 30+ days ago • Promoted
    United States Border Patrol Agent

    United States Border Patrol Agent

    U.S. Customs and Border Protection • Rhodhiss, North Carolina, United States
    Full-time
    Customs and Border Protection (CBP) offers those interested in a career in law enforcement an exceptional opportunity to work with an elite team of highly trained professionals whose camaraderie, p...Show more
    Last updated: 30+ days ago • Promoted