About the Role
Vertical Relevance is seeking a Senior AWS Cloud Security Consultant to design and enforce enterprise cloud security controls within a highly regulated environment. This role focuses on preventing data exfiltration through policy-as-code, data perimeter controls, and proactive threat modeling, evaluating AWS services before production introduction and implementing preventive controls.
Responsibilities
- Evaluate AWS services before they are introduced into production environments.
- Identify potential security risks at the API and configuration level.
- Implement preventive controls using AWS Organizations policies, IAM guardrails, and Rego-based policy frameworks.
Requirements
- 8+ years of cloud engineering, cloud security, or infrastructure security experience.
- Deep expertise in AWS security architecture and governance.
- Demonstrated experience performing API-level threat modeling for AWS services.
- Strong hands-on experience with Open Policy Agent (OPA), Rego policy development, and policy testing and validation.
- Advanced knowledge of AWS IAM, AWS Organizations, SCPs and RCPs, and Data perimeter architecture.
- Experience designing least-privilege access models in regulated environments.
- Strong understanding of cloud security controls, compliance requirements, and enterprise governance frameworks.
- Experience with Kivera.io, Cloudflare One, or similar cloud API policy enforcement platforms.
- Experience with Regal policy linting and OPA coverage reporting.
- Infrastructure-as-Code expertise using Terraform.
- CI/CD experience with GitHub Actions, OIDC federation, policy validation pipelines, and approval-based deployment models.
- Experience with Checkov, Conftest, Policy Sentry, and Cloudsplaining.
- Strong AWS observability experience using CloudWatch, CloudTrail, and VPC Flow Logs.
- Amazon EKS security and governance experience.
- Experience working directly with AWS Support and Technical Account Managers.
- Financial services, banking, capital markets, or other highly regulated industry experience.
Skills
- AWS security architecture
- AWS governance
- API-level threat modeling
- Open Policy Agent (OPA)
- Rego policy development
- Policy testing
- Policy validation
- AWS IAM
- AWS Organizations
- SCPs
- RCPs
- Data perimeter architecture
- Least-privilege access models
- Cloud security controls
- Compliance requirements
- Enterprise governance frameworks
- Kivera.io
- Cloudflare One
- Regal policy linting
- OPA coverage reporting
- Terraform
- GitHub Actions
- OIDC federation
- Checkov
- Conftest
- Policy Sentry
- Cloudsplaining
- CloudWatch
- CloudTrail
- VPC Flow Logs
- Amazon EKS security
- Amazon EKS governance
Experience Level
- Senior
About the Company
- Vertical Relevance helps business leaders drive value through transformation programs across people, processes, and systems.
- Their mission is to help firms develop custom solutions for success and growth.
- They provide services from strategy and design through to implementation and training.
- Their professionals have an average of 20+ years’ experience within Financial Services, across Wealth Management, Asset Management, Insurance, and Banking.
- Their Customer Experience practice adds complementary industry expertise (technology and media).
- They focus on client success by assessing business and technology challenges and right-sizing solutions for ROI.
- They leverage product partnerships in CRM, Sales Acceleration, Predictive Analytics, Digital Knowledge Management, and Cloud Transformation.
