Principal Consultant - OT & Cyber Security
We’re looking for a hands‑on Senior Cloud Security Engineer to take ownership of cloud and container security across complex AWS environments. The focus is on Zero Trust, Terraform automation, Kubernetes hardening, encryption, and threat detection at scale.
What You’ll Do
- Design and secure multi‑VPC architectures with full network segmentation and Transit Gateway control.
- Enforce Zero Trust access and fine‑grained ingress / egress policies using AWS Network Firewall, Security Groups, and NACLs.
- Deploy and tune WAFs, DNS firewalls, and DLP / EDR solutions (e.g., CrowdStrike, SentinelOne).
- Implement end‑to‑end encryption across workloads (KMS, ACM, HSM, TLS 1.3, Nitro Enclaves).
- Secure EKS / ECS clusters — network policies, RBAC, admission controllers, image scanning, and runtime protection.
- Harden virtualized environments (VMs, WorkSpaces, VMware on AWS) with micro‑segmentation and endpoint monitoring.
- Build and maintain Terraform modules to deploy compliant, secure infrastructure as code.
- Integrate compliance‑as‑code and automated posture checks into CI / CD pipelines.
- Correlate alerts from GuardDuty, WIZ, Inspector, and SIEMs to identify and prevent attacks.
- Lead incident response and containment for anomalies across AWS and container workloads.
- Develop automated playbooks for isolation, threat mitigation, and privilege escalation detection.
What You’ll Bring
6+ years in cloud security engineering , with strong AWS focus.Deep knowledge of VPC segmentation, Zero Trust, encryption, and IaC .Hands‑on with Kubernetes / EKS security , runtime detection, and policy enforcement.Experience implementing DLP, EDR, DNS, and threat prevention at scale.Strong Terraform automation and secure CI / CD integration skills.Familiar with SIEMs, anomaly detection, and compliance frameworks (CIS, NIST, ISO 27001, SOC 2).Certifications (Preferred)
AWS Certified Security – Specialty (required)AWS Solutions Architect – ProfessionalCertified Kubernetes Security Specialist (CKS)HashiCorp Terraform AssociateCISSP / CCSPSeniority level
Mid‑Senior level
Employment type
Full‑time
Job function
Information Technology, Engineering, and Other
Industries
IT Services and IT Consulting, Computer and Network Security, and Financial Services
#J-18808-Ljbffr