AWS Cloud Security Technical Lead – AMP | Terraform | DevSecOps | IAM

We are looking for an experienced AWS Cloud Security Technical Lead to support the Agentic Migration Platform (AMP), an automation and orchestration platform supporting a large-scale VMware-to-AWS Outposts migration.Key ResponsibilitiesLead security reviews for Terraform modules, automation tools, and platform components.Perform STRIDE-based threat modeling and security architecture reviews.Review AWS IAM, cross-account roles, permission boundaries, trust policies, and OIDC federation.Assess Terraform/IaC security, including module/provider versioning and state-file protection.Integrate and manage SAST/SCA and security scanning within CI/CD pipelines.Triage findings from Checkov, Semgrep, SAST/SCA, Wiz, Astra, and CheckR.Support SBOM, dependency scanning, secrets scanning, and software supply-chain security.Validate security controls for AWS Outposts workloads and golden AMIs.Support SOX, PCI DSS, audit readiness, and AT&T security/CCOE compliance.Provide regular status updates on security reviews, threat models, and security deliverables.Must-Have ExperienceStrong AWS Cloud Security experience with hands-on implementation.Strong Infrastructure-as-Code (IaC) Security experience, especially Terraform/CloudFormation.Strong DevSecOps and CI/CD pipeline security experience.Hands-on experience with AWS IAM and security architecture.Experience with threat modeling, vulnerability management, and security scanning.CertificationsAt least one active certification required:AWS Certified Security – SpecialtyAWS Solutions Architect – Professional