Job Description:

Role & Responsibilities:

- Design and implement AWS Organizational Governance including Service Control Policies (SCPs), multi-account patterns, and delegated admin setups.

- Build and maintain logging and audit foundations: Org CloudTrail, AWS Config aggregators, S3 log archive hardening, GuardDuty, Security Hub.

- Operate CSPM/CNAPP tooling (e.g., Wiz.io): onboard accounts/resources, tune posture policies, integrate with ticketing and log routing pipelines (Cribl/SIEM).

- Develop Infrastructure as Code (Terraform) modules and reusable patterns with policy-as-code integration and CI scanning.

- Conduct vulnerability and risk prioritization using CVSS, exploit context, asset criticality, and signal sources.

- Automate validation, evidence export, and reporting using Python (boto3), AWS CLI, and shell scripting.

- Manage identity and access: IAM least privilege, cross-account role assumptions, permission boundaries, and automation roles.





- Handle observability and data routing pipelines (Cribl, Firehose, Kinesis).

- Ensure compliance awareness, especially HIPAA safeguard themes (auditability, access control, data protection).

- Design and extract metrics & KPIs: coverage %, MTTR, SLA compliance, control efficacy.

Preferred Candidate Profile:

- Strong experience in AWS Security and Cloud Governance.

- Expertise in Terraform and Python automation for cloud security tasks.

- Deep understanding of IAM, SCPs, CloudTrail, Config, GuardDuty, Security Hub, and CNAPP tools.

- Hands-on experience with CI/CD integration and cloud security pipeline automation.

- Familiarity with compliance frameworks (HIPAA, ISO, SOC) and reporting KPIs.

- Solid problem-solving skills and ability to design reusable security patterns in a multi-account AWS environment.

📌 AWS Cloud security (Kolkata)
🏢 Cloudxtreme
📍 Kolkata