AWS Cloud Security Infrastructure Engineer

abra is looking for an experienced AWS Cloud Security Infrastructure Engineer to join a large-scale, complex cloud environment and take a hands-on role in securing and maintaining AWS infrastructure.

This role combines cloud security, infrastructure engineering, networking, and automation. You will work across multi-account AWS environments, implement security controls, manage identities and permissions, and take part in cloud projects from planning and design through implementation and ongoing operations.

Ben Gurion Airport Area

What You'll Do

• Operate, maintain, implement, and troubleshoot cloud security systems and infrastructure.
• Implement security controls and secure configurations across AWS services and infrastructure.
• Work with AWS native security services, including IAM, KMS, GuardDuty, Security Hub, WAF, and CloudTrail.
• Manage cloud identities, permissions, resource policies, cross-account access, and privilege controls.
• Develop and maintain security infrastructure and controls as code using Terraform or equivalent IaC technologies.
• Implement security controls across IAM, secrets and key management, service hardening, logging and visibility, and security automation.
• Work with AWS networking components, including VPCs, Security Groups, routing, subnetting, and external connectivity.
• Support cloud migration projects from on-premises environments to AWS.
• Participate in projects from planning and design through implementation and production.
• Troubleshoot complex cloud security, networking, and infrastructure issues.
• Create and maintain technical documentation and operational procedures.

• At least 3 years of experience in Information Security, or relevant academic/professional training combined with the required security experience.
• At least 2 years of hands-on Information Security experience in an organization with 1,000+ users.
• At least 2 years of experience within the last 5 years in Cloud Security, DevOps, or Cloud Infrastructure Engineering.
• At least 2 years of hands-on experience with AWS, including multi-account environments.
• At least 2 years of experience with cloud security architecture and AWS security services, such as IAM, KMS, GuardDuty, Security Hub, WAF, and CloudTrail, or equivalent technologies.
• At least 2 years of hands-on experience with Terraform or equivalent IaC technologies, including writing and maintaining infrastructure code.
• Experience with cloud identity and permission models, including resource policies, cross-account trust, permission boundaries, and privilege escalation paths.
• Experience migrating infrastructure from on-premises environments to AWS.
• Experience implementing cloud security controls in at least 3 areas, such as IAM, secrets/key management, service hardening, organizational policies, logging and visibility, and automated response.
• At least 2 years of experience with cloud networking and communication protocols, including VPC, Security Groups, routing, and external exposure.
• Strong understanding of networking concepts and troubleshooting, including the OSI model, routing protocols, subnetting, and routing priorities.
• Knowledge of Windows and Linux environments.
• Native-level Hebrew and strong English communication skills.

Advantages

• 3 years of experience building or expanding AWS Landing Zones / multi-account AWS environments.
• Hands-on experience with Firewalls, SASE, NAC, IPSEC, and VPN technologies.
• 3 years of scripting and automation experience using Python, Bash, or similar technologies.
• AWS professional certification such as AWS Certified Security – Specialty, Solutions Architect – Professional, or DevOps Engineer – Professional.