Principal Cloud Security Engineer

Role OverviewEcho is seeking a Principal Cloud Security Engineer to build secure-by-default AWS platform patterns across a growing multi-account environment. This is a senior hands-on engineering role for someone who approaches security as a software and platform problem.What You Will DoDesign and implement secure-by-default AWS account, organization, and baseline guardrail patterns across multi-account environments. Build and maintain reusable Terraform modules, policy-as-code, and infrastructure delivery patterns that prevent high-risk actions, reduce drift, and improve traceability.Why It Might Be a FitThe ideal candidate is equally comfortable with cloud infrastructure, modern application architectures, and developer workflows, and can work credibly across Security, Platform Engineering, Architecture, and software teams.Requirements8+ years software engineering, platform engineering, SRE, infrastructure engineering, or cloud securityStrong hands-on experience in AWS security engineering in multi-account environmentsDeep experience with infrastructure-as-code, especially Terraform, including reusable modules and tested patterns.Strong software engineering or platform engineering background; ability to write production-quality code in at least one modern language such as C#, Go, Python, Java, or TypeScriptExperience with policy-as-code, preventive guardrails, configuration governance, or cloud-native policy enforcementHands-on experience securing Kubernetes/EKS and serverless patterns in AWSExperience building detective and preventive controls for cloud logging, monitoring, and control plane integrity.BenefitsbonushealthcarePTOretirementlearning budgetparental leavewellnessvisa/relocationremote flexibilitystipendspaid holidaysOriginally posted on Himalayas