Apply on Employer Site

ALTA IT Services, LLC · 1 day ago

AWS Security Manager

United States

Contract

Remote

Senior Level

6+ years exp

ALTA IT Services, LLC is a leader in delivering outsourced services and workforce solutions across North America. The AWS Security Manager is responsible for ensuring the security, compliance, and protection of cloud-based infrastructure, leading a team of security engineers, and establishing enterprise-wide AWS security standards and policies.

ConsultingInformation TechnologyStaffing Agency

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Lead and mentor a team of security engineers focused on AWS hardening, Terraform automation, CI/CD security and cloud monitoring and incident response

Establish enterprise-wide AWS security standards and policies

Oversee Identify and Access Management (IAM) strategy

Strong proficiency with Terraform, including writing reusable modules and automated deployments through CI/CD

Experience with AWS Lambda development and serverless architecture, with the ability to guide engineers, review code, enforce best practices and ensure secure scalable deployments

Manage deployment and configurations of AWS native security tools: AWS Security Hub, Guard Duty, Config and Config rules, KMS encryption keys, VPC Security (NACLs, subnets)

Strong understanding of IAM Roles/Policies and Identity Federation, Encryption, KMS, secrets management

Work with DevOps teams to implement security best practices into CI/CD pipelines and infrastructure as code

Enforce controls for logging, encryption, network segmentation, patching, vulnerability management

Drive security automation for drift detection, patching, vulnerability remediation and compliance reporting

Oversee detection and response to security events in AWS

Manage threat investigations, root cause analysis remediation plans

Build and maintain runbooks, tabletop exercises and escalation paths

Implement and improve AWS security controls, guardrails and baseline configurations

Continuously evaluate AWS environments for cost-effective security improvements

Conduct threat modeling, vulnerability analysis and remediation coordination

Maintain AWS risk register, security assessments and internal controls

Ensure readiness for audits, SA&A, NIST, FISMA and FedRAMP

Manage evidence gathering, control testing and gap remediation. Work with external auditors and internal stakeholders during audit cycles

Conduct regular configuration reviews, vulnerability scans and compliance checks

Approve and reject new AWS architecture from a security standpoint

Partner with DevOps, engineering, development teams. Train teams on secure cloud practices

Report risks, KPIs and metrics to senior leadership

Participate in on-call rotations to support 24/7 production systems and respond to incidents as they arise

Qualification

AWS security servicesTerraform automationIAM managementCloud risk assessmentsPython scriptingAWS Lambda developmentSecurity compliance certificationIncident responseTeam leadershipSoft skills