AWS DevSecOps

High Bridge Consulting LLC

. Design, author, test, and deploy AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs) .

Posted 10/31/2026full-timeRemote • United StatesMid-LevelSenior💰 $110,000 - $160,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in AWS DevSecOps and Cloud Security, with a strong focus on designing and implementing security policies using Terraform and Infrastructure-as-Code. Proficient in managing IAM policies and AWS security controls to protect critical resources in multi-account environments.

Highest-signal resume keywords

AWS DevSecOps ExperienceTerraform / Infrastructure-as-CodeAWS Organizations ManagementIAM Policy DevelopmentAWS Certified Security – Specialty

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS Service Control PoliciesResource Control PoliciesIAM Access AnalyzerVPC Endpoint PoliciesCloud Security ControlsSecurity AutomationPolicy Testing and TroubleshootingMulti-Account AWS EnvironmentsSecurity Runbooks DevelopmentPhased Production Rollouts

Tools & Technologies

AWS Control TowerAWS OrganizationsTerraformAWS KMSAWS S3

Certifications & Qualifications

AWS Certified Security – Specialty

Industry Keywords

Cloud SecurityGovernanceKnowledge TransferEnterprise-Scale AWS EnvironmentsSecurity-Sensitive Services

Tech Stack

Tools & technologies

AWSCloudTerraform

About the role

Key responsibilities & impact

Design, author, test, and deploy AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs)
Implement cloud security controls using Terraform / Infrastructure-as-Code
Work with AWS Organizations, OUs, and Control Tower/AFT in a multi-account environment
Develop and manage IAM policies, IAM Access Analyzer, VPC endpoint policies, and resource-based policies
Protect critical AWS resources including S3, KMS, logging, and other security-sensitive services
Test policies in sandbox environments, assess blast radius, and support phased production rollouts
Develop security runbooks and provide knowledge transfer to engineering/operations teams

Requirements

What you’ll need

Strong hands-on AWS DevSecOps / Cloud Security experience
Experience with AWS Organizations and multi-account AWS environments
Hands-on experience with SCPs and IAM policies; RCP experience strongly preferred
Strong Terraform / IaC experience
Experience with AWS security controls, IAM, S3, KMS and VPC
Ability to design, test, troubleshoot, and safely roll out cloud security policies
AWS Control Tower / Account Factory for Terraform (AFT) preferred
IAM Access Analyzer preferred
AWS Certified Security – Specialty preferred
Experience supporting enterprise-scale AWS environments preferred
Experience with security automation, governance, runbooks, and knowledge transfer preferred