Cloud Security Engineer
fidelity
Job Description
Over 3 - 5 Years of strong experience with cloud platforms (AWS & Azure), preferably AWS and their native event systems.
• Development experience with Python/Go, or similar languages for backend and automation work.
• Strong experience with CI/CD pipelines, infrastructure as code (Terraform, CloudFormation), and DevOps practices.
• Experience with Cloud Security Concepts, NIST Framework, Security Controls, CloudTrail, logging & monitoring telemetry, and security event correlation.
• Hands-on experience with CSPM (Cloud Security Posture Management) tools such as Wiz, Rapid7, or similar platforms for continuous security monitoring and compliance.
• Strong expertise in Identity and Access Management (IAM) including role-based access control (RBAC), least privilege principles, IAM policy design, service control policies (SCPs), cross-account access patterns, and federation (SAML, OIDC).
• Experience with AWS Organizations, multi-account strategies, organizational units (OUs), consolidated billing, service control policies, and account governance frameworks.
Non-Technical Skills
• Strong analytical thinking and ability to derive insights from complex data.
• Excellent communication skills – able to translate technical findings into business value.
• Collaborative mindset with a passion for cross-functional teamwork.
• Curiosity and a continuous improvement mindset – always looking for better ways to do things.
• Ability to prioritize and manage ambiguity in a fast-paced environment.
• Growth mindset – eager to learn, experiment, and continuously improve.
Preferred Skills
• Exposure to AWS Cloud, Security Concepts & Controls, Python, DevOps, CI/CD Pipelines.
• Familiarity with ITSM tools (e.g., ServiceNow), Incident Management and CMDB integration.