Note: The job is a remote job and is open to candidates in USA. I.T. Solutions, Inc. is seeking a Principal Cloud Security Engineer to integrate security into the engineering process rather than treating it as a separate checkpoint. This role involves designing AWS security patterns, building Terraform modules, and implementing preventive controls to ensure safe cloud operations.
Responsibilities
- Design AWS multi-account, organization, and guardrail patterns that make the secure path the easy one
- Build and own a library of Terraform modules and policy-as-code that engineering teams adopt across the company
- Implement preventive controls, including SCPs, deployment-time policy validation, and drift detection, for high-risk cloud actions, in the code paths where work already happens
- Build logging integrity and tamper resistance into CloudTrail, telemetry pipelines, and core monitoring; define what good cloud telemetry looks like for downstream detection
- Partner with Platform and Architecture on identity, networking, EKS, and serverless patterns. Work with Security Operations to turn cloud signals into useful detections
- Make architecture decisions visible through design docs, pull requests, and reference implementations others can read and copy
Skills
- Must be US Citizen because of government project
- 8+ years across software engineering, platform engineering, SRE, or cloud security, with substantial hands-on AWS work in multi-account environments
- Production-quality code in at least one of Go, Python, TypeScript, C#, or Java. You think about security problems as software problems
- Deep Terraform: reusable modules, tested patterns, and an opinion about how IaC should be structured at scale
- Hands-on experience with policy-as-code, preventive guardrails, and securing EKS and serverless workloads
- Experience building detective and preventive controls for cloud control planes and logging integrity
- Comfort working through pull requests and design reviews with engineering teams, not only with security teams
- SIEM/XDR integration experience; familiarity with Palo Alto or Prisma
- CI/CD security patterns and developer-enablement work
- Securing AI/GenAI services, internal copilots, or agentic workflows in cloud environments
Benefits
- Location: 100% remote
- Type: Contract to Permanent
Company Overview