DN
AWS Cloud Security Engineer – Networking & Compliance
Diversity Nexus
🇺🇸 United States
Hybrid
1 month ago
- IaC
- AWS CDK
- AWS
- Terraform
- NAT
- WAF
- IAM
- Entra
- SAML
- SCIM
- GuardDuty
- FIPS
- KMS
- TLS
- Incident Response
- DFARS
1 month ago
Experience level - 7 years
Study Level : Bachelor's Degree
AWS Advanced Networking: Direct experience configuring Transit Gateway (TGW) hubs and routing, AWS Network Firewall (NFW), Egress/NAT, Ingress (PrivateLink, WAF, ALB), and Route 53 Resolvers/PHZ.
Identity & Access Management (IAM): Hands-on implementation of IAM Identity Center, Entra GCC federation (SAML + SCIM), Permission Sets, Permission Boundaries, and cross-account IAM roles.
AWS Security Services (Org-Wide): Automated deployment via Terraform of Security Hub, GuardDuty, Macie, and AWS Config Conformance Packs. FIPS & Encryption Hardening: Expertise enforcing FIPS 140 HSMs via KMS, AES-256 encryption at rest, and TLS 1.2+ FIPS in transit.
Certifications: AWS Certified Security – Specialty or AWS Certified Advanced Networking – Specialty.
Compliance & Incident Response: Understanding of DFARS 7012 72-hour reporting automation workflows and forensic readiness. Third-Party Security Tools: Experience integrating WAF/API security solutions like Cequence.
AWS Cloud Security Engineer – Networking & Compliance · Diversity Nexus