Senior AWS Cloud Security Consultant

Our client is a 3rd-generation management consulting firm that is expanding its team and looking to hire a Senior AWS Cloud Security Consultant on a full-time, permanent basis. This will be in Manhattan, NY. Summary The client is seeking a Senior AWS Cloud Security Consultant to help design and enforce enterprise cloud security controls within a highly regulated environment. This role sits at the intersection of cloud security architecture, policy engineering, and AWS governance, with a primary focus on preventing data exfiltration through policy-as-code, data perimeter controls, and proactive threat modeling. You will evaluate AWS services before they are introduced into production environments, identify potential security risks at the API and configuration level, and implement preventive controls using AWS Organizations policies, IAM guardrails, and Rego-based policy frameworks. This is an opportunity to work on complex cloud security challenges supporting critical business platforms where security, compliance, and operational rigor are non-negotiable. Key Responsibilities 8+ years of cloud engineering, cloud security, or infrastructure security experience. Deep expertise in AWS security architecture and governance. Demonstrated experience performing API-level threat modeling for AWS services. Strong hands-on experience with: Open Policy Agent (OPA) Rego policy development Policy testing and validation Advanced knowledge of: AWS IAM AWS Organizations SCPs and RCPs Data perimeter architecture Experience designing least-privilege access models in regulated environments. Strong understanding of cloud security controls, compliance requirements, and enterprise governance frameworks. Preferred Qualifications Experience with Kivera.io, Cloudflare One, or similar cloud API policy enforcement platforms. Experience with Regal policy linting and OPA coverage reporting. Infrastructure-as-Code expertise using Terraform. CI/CD experience with: GitHub Actions OIDC federation Policy validation pipelines Approval-based deployment models Experience with: Checkov Conftest Policy Sentry Cloudsplaining Strong AWS observability experience using: CloudWatch CloudTrail VPC Flow Logs Amazon EKS security and governance experience. Experience working directly with AWS Support and Technical Account Managers. Financial services, banking, capital markets, or other highly regulated industry experience. Technical Environment AWS Organizations with SCP and RCP governance Open Policy Agent (OPA) Rego policy language Kivera.io policy enforcement platform Cloudflare One Terraform GitHub Actions CloudWatch CloudTrail VPC Flow Logs Amazon EKS Enterprise Data Perimeter Architecture Compensation: $100,000.00 - $160,000.00 per year Who We Are High Bridge is a bottom-up consulting firm with more than two decades of experience creating innovative solutions for the technology industry. We connect thoughtfully curated talent with reputable employers in our field. We partner with like-minded companies to bolster mutual success and understanding. We deliver results through strategic planning and meticulous project management. At High Bridge, we believe that success is a measure of results and process, product and person. We are proud to bring integrity and humanity to the work that we do each day. Whether we're interviewing prospective associates, brainstorming with partners, or troubleshooting with vendors, we pledge our commitment to honesty, transparency, and good humor at every junction. Careers Are you passionate about technology? Do you believe in no finish lines? Are people and process the heel in your stride? High Bridge Consulting may be the next journey for you. Here at High Bridge, our island is technology, but our village is human. We value a culture of authenticity, integrity, and creativity. We work smart, not hard, we look forward, not backward, and we love coming to work on Monday. If you aren't afraid of heights, join us on our bridge.