- Design and evolve scalable security controls across AWS multi-account environments using security-as-code principles.
- Own Kubernetes security architecture, including workload isolation, RBAC, pod security standards, and network segmentation.
- Embed security automation into CI/CD pipelines, including image scanning, IaC validation, and policy enforcement.
- Assess cloud and Kubernetes environments for vulnerabilities, misconfigurations, and emerging threats.
- Design and maintain IAM and secrets management practices, enforcing least-privilege access.
- Partner with DevOps, Platform, and IP/Network teams to deliver security controls as code and by design.
- Analyze network traffic and security telemetry using flow logs, metrics, and targeted packet inspection.
- Ensure alignment with internal security policies and external frameworks such as CIS, NIST, and ISO 27001.
- Maintain documentation, including security architectures, runbooks, and incident response playbooks.
- Drive security best practices, awareness, and secure engineering practices across teams.
PythonBashGo+1 more