Senior Security Engineer, RSCI Vector Security
Do you have a passion for innovation and building technologies that make large-scale clouds more reliable, efficient, and scalable? Would you like to work within the most advanced and scaled clouds that support the most critical workloads for the US Intelligence and Defense communities? Do you want to build automation that will influence the national security and defense mission agency partners of AWS?
The Regions Services Corporate Infrastructure (RSCI) Vector Security Team is looking for a Senior Security Engineer to help validate that our services, applications, and infrastructure are designed and implemented to the highest security standards. Our highly collaborative team is committed to each team member’s growth as our business grows.
Our mission is to deliver robust, highly available, and easy to use services to our internal customers in support of the Amazon Dedicated Cloud for U.S. Government customers.
The Senior Security Engineer is responsible for ensuring the appropriate operational security posture is maintained for the US ADC Remote Management and Administration (RM&A) networks. As a Senior Security Engineer, you will be responsible for analyzing the security of infrastructure, applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our cutting-edge services.
You are expected to be strong in multiple security domains and provide significant contributions to the Engineering team and to multiple groups throughout Amazon. You are expected to closely work with service teams to develop secure solutions to complex business problems and ensure we are holding a high security bar for our customers. You are also expected to mentor more junior engineers and be a security thought leader for the organization.
You must foster constructive dialogue and seek resolution when confronted with discordant views. Engineers in this role are expected to participate fully in the planning of the org’s team work and constantly seek opportunities for process improvement. You should also have a deep understanding of at least one specialty for which you are a sought-out resource (both within IT Security and by groups throughout Amazon), while having an understanding of the application of Information Security in a broad range of technical areas.
You will be “Customer Obsessed”, working closely with our customers to understand their pain points and find resolution quickly and completely. You will have a keen eye for potential problems and inefficiencies, and the initiative and drive to provide a complete solution to the problem. You will communicate clearly and collaborate with others to deliver results with minimal supervision. This leader must be able to dive deep into the details of business, operations, and engineering.
This position requires that the candidate selected must currently possess and maintain an active TS/SCI security clearance with polygraph. The position further requires the candidate to opt into a commensurate clearance for each government agency for which they perform AWS work.
Key job responsibilities
- Conduct pre-launch security reviews
- Hardening of Windows services aligned with NIST Compliance requirements
- Security training and outreach to internal development teams
- Security guidance documentation
- Security tool development
- Security metrics delivery and improvements
- Work with builders and service teams to address detected security problems in an appropriate and timely fashion.
- Identify and prioritize security problems that can be detected using automation.
- Identify opportunities to prevent security problems at scale.
- Document and provide security guidance that will be used across ADC Windows environments
Minimum Qualifications
- Bachelor’s Degree in Computer Science or a related discipline, or equivalent work experience in lieu of degree
- 7+ years of progressive security architecture experience; preferably within a Microsoft Active Directory environment
- 7+ years of experience designing and implementing a secure Active Directory domain architecture
- 7+ years experience working with stakeholders across many job functions
- CompTia Security + CE Certification, CompTIA Advanced Security Practitioner (CASP) or Certified Information Systems Security Professional (CISSP) certification
- Current, active US Government Security Clearance of TS/SCI with Polygraph
Preferred Qualifications
- Master's Degree in Engineering, Information Technology or related technical discipline
- 8+ years of prior experience as Network or Systems Engineer/Administrator.
- 8+ years of experience in understanding of all aspects of Systems Engineering, including design and architecture.
- Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)
- Experience in securing cloud services
- Experience in Identity standards and frameworks
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit
#J-18808-Ljbffr