• Design, implement, and maintain security controls across AWS services (EC2, S3, RDS, EKS, ECS, Lambda, API Gateway) • Configure and optimize AWS security services including GuardDuty, CloudTrail, CloudWatch, Security Hub, and AWS Config • Implement VPC security architecture, network segmentation, security groups, and NACLs • Manage CloudFront and ALB security configurations including WAF rules • Secure containerized workloads and serverless architectures • Design and implement least-privilege IAM policies, roles, and permission boundaries • Manage AWS Identity Center (SSO) and integration with Okta • Conduct access reviews and support user provisioning while maintaining security standards • Implement secure service-to-service authentication patterns • Monitor and respond to security alerts from GuardDuty, CloudTrail, and AWS security services • Investigate and remediate security findings from Wiz cloud security platform • Perform threat analysis and security incident investigation • Develop security incident response playbooks for cloud threats • Implement and maintain security controls for Databricks workspaces on AWS • Support SOC 2 and other compliance audit requirements • Maintain security documentation and audit trail evidence • Enforce security policies and compliance standards across AWS accounts • Partner with Engineering, DevOps, and IT teams to integrate security into cloud operations • Automate security processes using Infrastructure as Code • Document security architectures, procedures, and runbooks • Provide security guidance on AWS best practices • Coordinate with external security vendors, testers, and auditors as needed