AWS Cloud Security Technical Lead - Remote

Role Overview:The Security Technical Lead will serve as the security SME for the Agentic Migration Platform (AMP), ensuring AWS architecture, IAM, Terraform/IaC, automation tools, and CI/CD pipelines meet security standards and AWS best practices.Key Responsibilities:Conduct security reviews and STRIDE-based threat modeling for Terraform modules and platform components.Review AWS IAM roles, permission boundaries, trust policies, and OIDC federation.Assess Terraform/IaC security, including module versions, state-file protection, and workflow security.Implement and operationalize SAST/SCA security scanning within CI/CD pipelines.Support SBOM generation, dependency scanning, secrets scanning, and software supply-chain security.Triage vulnerability findings using tools such as Wiz, Astra, and CheckR.Support security alignment, compliance evidence, and audit readiness for SOX and PCI DSS.Ensure platform artifacts comply with organizational and AWS security policies.Required Skills:5+ years of Cloud Security experience with hands-on AWS implementation.3+ years of Terraform/CloudFormation and Infrastructure-as-Code security experience.Strong CI/CD security and DevSecOps experience.Experience with AWS IAM, threat modeling, SAST/SCA, vulnerability management, and security scanning.Active AWS Certified Security Specialty or AWS Solutions Architect – Professional certification.Preferred:CISSP certification.Experience with GitHub Actions, CodeBuild, Checkov, Semgrep, SBOM, and secrets scanning.