Description and Skills: We are seeking a skilled Cloud Engineer with expertise in AWS cloud services, specifically in security, compliance, and networking. The ideal candidate will have hands-on experience with key AWS services such as AWS Audit Manager, AWS Detective, AWS Guard Duty, AWS Firewall, AWS Security Hub, AWS Shield, AWS WAF, and the management and deployment of Network and Application Load Balancers. The role involves supporting and securing our AWS cloud infrastructure, implementing best practices, and ensuring a robust and scalable environment aligned with security and compliance standards.

Key Responsibilities

1. AWS Security & Compliance Management:
   Implement and manage AWS Audit Manager to continuously monitor and evaluate compliance frameworks.
   Utilize AWS Detective to conduct security investigations, analyze findings, and recommend remediation strategies.
   Configure and optimize AWS Guard Duty to identify and respond to security threats in real-time.
   Deploy and manage AWS Shield for DDoS protection and AWS WAF (Web Application Firewall) to safeguard applications from common web exploits.

2. Cloud Infrastructure Security & Monitoring:
   Administer AWS Security Hub to provide centralized security management and automated compliance checks across AWS accounts.
   Leverage AWS Firewall Manager to ensure consistent firewall rules and policies are applied across multiple accounts.
   Monitor and respond to network security incidents using AWS-native tools and integrations.
3. Cloud Networking & Load Balancing:
   Design, deploy, and manage Network Load Balancers (NLB) and Application Load Balancers (ALB) for scalable, highly available, and fault-tolerant application delivery.
   Ensure optimal traffic distribution, routing, and secure access to applications hosted on AWS.
4. Cloud Environment Setup & Automation:
   Assist in the design and implementation of AWS Control Tower for automated multi-account setup and governance.
   Work with AWS Landing Zone to establish and manage secure, scalable, and compliant AWS environments.
   Utilize Infrastructure-as-Code (IaC) tools like CloudFormation or Terraform to automate the provisioning and management of AWS resources.
5. Incident Response & Remediation:
   Respond promptly to security incidents, ensuring effective containment and remediation using AWS security tools.
   Conduct root cause analysis and document incidents, including mitigating actions and lessons learned.
6. Collaboration & Documentation:
   Collaborate with other teams, including DevOps, Networking, and Security Operations, to align cloud architecture with business needs.
   Develop and maintain technical documentation related to AWS security practices, network configurations, and incident response procedures.
7. Continuous Improvement:
   Stay current with AWS security best practices, new services, and emerging threats.
   Contribute to internal knowledge sharing and the improvement of cloud security frameworks.

Qualifications

3+ years of experience in cloud engineering, with a strong focus on AWS security, networking, and compliance.
Expertise with AWS Audit Manager, AWS Guard Duty, AWS Detective, AWS Security Hub, AWS Shield, AWS WAF, AWS Firewall Manager.
Hands-on experience with AWS Control Tower and AWS Landing Zone for multi-account architecture and governance.
Experience managing Network Load Balancers (NLB) and Application Load Balancers (ALB).

Certifications:

AWS Certified Solutions Architect – Associate or Professional.

AWS Certified Security – Specialty (preferred). Other relevant AWS certifications (e.g., AWS Certified SysOps Administrator, AWS Certified DevOps Engineer

Skills:

Proficient in AWS security services and networking solutions.

Strong knowledge of cloud infrastructure, security, and compliance frameworks.

Experience with Infrastructure-as-Code (IaC) tools (e.g., AWS CloudFormation, Terraform).

Familiarity with DevOps practices, CI/CD pipelines, and automation.

Strong troubleshooting and incident response skills.

Good communication and documentation skills.

Preferred Skills:

Knowledge of additional AWS services like AWS Elastic Load Balancing, Amazon VPC, IAM, and EC2.

Experience with third-party security tools and integrations for enhanced cloud security.