- AWS Organizations and SCP / RCP design and implementation.
- Cloud security governance and guardrails across multi account AWS environments.
- Robust understanding of AWS IAM, permission boundaries and access control models.
- Scripting and automation using Python and PowerShell.
- AWS security services including Config and CloudTrail.
- Policy as Code and compliance automation (Config Rules, Cloud Custodian or similar).
- Experience building automated security controls and remediation workflows.
- CI/CD integration for security and compliance enforcement.