Cloud Security Engineer

The role

This person will design and implement AWS security architectures and manage security controls. They will secure cloud infrastructure, applications, and workloads while integrating security into DevOps workflows.

What you will do

• Design and implement AWS security architectures aligned with compliance and industry best practices
• Assess cloud security risks, enforce security policies, and support audits across AWS environments
• Manage AWS IAM, Organizations, and Control Tower to enforce least privilege and role-based access controls
• Deploy and manage AWS-native security services
• Configure and maintain encryption solutions
• Integrate AWS logging and monitoring with SIEM platforms for threat detection
• Secure networks via AWS VPCs, Security Groups, ACLs, and PrivateLink
• Work with DevOps to embed security in CI/CD pipelines
• Automate security with Terraform, CloudFormation, and scripting
• Apply container and Kubernetes security practices for AWS EKS, ECS, and Fargate environments

Required qualifications

• 10+ years of IT/security experience
• 4+ years focused on AWS cloud security
• Hands-on expertise securing AWS services (IAM, VPC, EC2, S3, RDS, Lambda, EKS, ECS, Fargate, CloudFront, Route 53)
• Strong knowledge of AWS-native security tools (GuardDuty, Security Hub, Macie, Inspector, WAF, Shield, CloudTrail, CloudWatch)
• Proficiency in encryption and key management using AWS KMS, CloudHSM, and ACM
• Experience with IaC and automation (Terraform, CloudFormation, Python, Bash, PowerShell)
• Skilled in container and serverless security (EKS, ECS, Fargate, Lambda)
• Knowledge of Zero Trust, identity federation, and RBAC in AWS environments
• Experience with vulnerability scanning, penetration testing, and audit readiness in cloud environments
• Familiarity with SIEM and SOAR tools, incident response, and forensic analysis in AWS
• Proven track record of leading cloud security initiatives in regulated industries

Nice to have

• Experience with multi-cloud environments (Azure, GCP)
• AWS Security Specialty or equivalent certifications (CISSP, Solutions Architect, DevOps Engineer)
• Bachelor’s degree in Computer Science, Cybersecurity, or related field

Benefits

• Discretionary Annual Bonus based on individual performance and company success
• Health and dental plans with 100% of the premiums covered
• Employee Assistance Program
• Retirement savings options
• Hybrid work model
• Reimbursement for tuition assistance and professional development
• Discounts through Perkopolis
• Rewards and recognition programs

About the company

Momentum Financial Services Group helps people move forward by reimagining how money works for those who need it most. They are the team behind Money Mart and a leader in financial solutions for underserved communities.