Python AWS Engineer

Role: Python AWS Engineer

Location: Hybrid to Plano, TX, Mclean, VA

Contract: W2

Job Description

#1 Requirement: CSPM At least 2 years of experience working with a Cloud Security Posture Management tool (Cloud Custodian, Wiz, Aqua Security, Prisma Cloud, etc)

#2 and #3 Requirement: Python and AWS

Project Scope:

• Onboard and manage new cloud services, primarily from AWS, for the organization
• Partner with the cybersecurity risk team to analyze risks associated with new cloud services
• Implement detection and prevention measures using the tool Cloud Custodian – This is a Cloud Security Posture Management tool
• Contribute to the open-source Cloud Custodian project by writing Python code to address gaps in the tool's capabilities as it pertains to AWS services needing onboard
• Manage a backlog of 50 cloud services that need to be recertified every 2 years – if they win the Discover work they will need to do this for all of the AWS services not currently certified to their standards
• Ensure that changes to existing cloud services are properly assessed and addressed

Required Skill Set:

• Strong Python development skills for automation and tuning of
• Experience with AWS services and concepts, such as EC2, IAM, networking, and data sharing – we are not needing a cloud engineer here. We are needing someone who understands these services and the policies needing enforced surrounding their use
• Understanding of identity and access management (IAM) basics, including roles and policies
• Familiarity with DevOps and SecOps practices
• Ability to write code that interacts with cloud service APIs, particularly AWS API libraries
• Passion for security and a desire to work in a behind-the-scenes, "thankless" role that isn’t front end focused
• Preference for candidates with prior DevOps or cloud infrastructure experience

The ideal candidate would be someone strong working with Python and a strong background in cloud infrastructure and security. The organization is particularly interested in candidates who have a passion for DevOps and SecOps, as this role is focused on protecting the enterprise infrastructure rather than building customer-facing applications.