Senior AWS Cloud Security Consultant

Our client is seeking a Senior AWS Cloud Security Consultant to design and enforce enterprise cloud security controls within a highly regulated environment. This role will focus on AWS security architecture, governance, policy-as-code, data perimeter controls, and preventing data exfiltration. The ideal candidate will have strong hands-on experience with AWS IAM, AWS Organizations, SCPs/RCPs, Open Policy Agent (OPA), and Rego. You will evaluate AWS services before production adoption, perform API-level threat modeling, identify security risks, and develop preventive guardrails and least-privilege access controls. Experience working in financial services, banking, capital markets, or another highly regulated environment is strongly preferred. Key Skills 8+ years of Cloud Engineering, Cloud Security, or Infrastructure Security experienceDeep AWS Security Architecture and Governance experienceAWS IAM, AWS Organizations, SCPs, RCPsOpen Policy Agent (OPA) and Rego policy developmentPolicy-as-Code, policy testing, and validationAPI-level threat modelingData Perimeter Architecture and Data Exfiltration PreventionLeast Privilege and Enterprise Security GuardrailsTerraform / Infrastructure-as-CodeCI/CD and GitHub ActionsCloudWatch, CloudTrail, VPC Flow LogsAmazon EKS security and governance Nice to Have: Kivera.io, Cloudflare One, Regal, Checkov, Conftest, Policy Sentry, Cloudsplaining, OIDC federation, and experience with regulated industries.