Senior Cloud Security Engineer - Remote Work | REF

At BairesDev®, we've been leading the way in technology projects for over 15 years. We deliver cutting-edge solutions to giants like Google and the most innovative startups in Silicon Valley.

Our diverse 4,000+ team, composed of the world's Top 1% of tech talent, works remotely on roles that drive significant impact worldwide.

When you apply for this position, you're taking the first step in a process that goes beyond the ordinary. We aim to align your passions and skills with our vacancies, setting you on a path to exceptional career development and success.

Senior Cloud Security Engineer at BairesDev

In this role, you'll design and maintain resilient AWS security architectures across multiple accounts, VPCs, clusters, and edge services, not just operate what someone else built. Tuning edge protection against real attack traffic and leading identity governance as a genuine initiative, you'll drive security decisions rather than execute tickets against them. This is your opportunity to work as an exceptional debugger and architect at once, tracing problems across network, infrastructure, and application boundaries while balancing security posture with system reliability.

What You'll Do

• Design and maintain AWS security architecture across multiple accounts, VPCs, clusters, and edge services.
• Configure and tune AWS edge protection including WAF, WebACLs, Shield, and CloudFront against DDoS, bot traffic, and credential stuffing.
• Continuously assess and optimize network topology, routing, and load balancer configuration for both security and reliability.
• Lead IAM and identity governance initiatives, including least privilege enforcement, role hygiene, and secrets management.
• Participate in and guide cloud incident response, including log analysis, forensics, and remediation planning.
• Troubleshoot and debug issues across network, infrastructure, and application boundaries.
  
  

What We Are Looking For

• 7+ years of experience in cloud security engineering.
• Strong expertise in AWS security architecture, including VPC networking, IAM, KMS, and secure workload design across multiple accounts and environments.
• Proven, production-level experience tuning AWS edge protection including WAF, WebACLs, Shield, and CloudFront under real attack traffic.
• Experience with network topology assessment and optimization, balancing security posture and system reliability.
• Proven experience leading IAM and identity governance initiatives, including least privilege enforcement, federation patterns, and secrets management.
• Hands-on experience with cloud incident response, including log analysis, forensics, and remediation planning.
• Strong cross-layer troubleshooting and debugging skills across network, infrastructure, and application layers.
• Advanced proficiency in English.
  
  

Nice To Have

• Experience with infrastructure scanning and IaC security review, including Terraform or CloudFormation policy review.
• Familiarity with governance and compliance frameworks such as SOC 2, ISO 27001, or NIST CSF.
  
  

How we do make your work (and your life) easier:

• 100% remote work (from anywhere).
• Excellent compensation in USD or your local currency if preferred
• Hardware and software setup for you to work from home.
• Flexible hours: create your own schedule.
• Paid parental leaves, vacations, and national holidays.
• Innovative and multicultural work environment: collaborate and learn from the global Top 1% of talent.
• Supportive environment with mentorship, promotions, skill development, and diverse growth opportunities.
  
  

Join a global team where your unique talents can truly thrive and make a significant impact!

Apply now!