Screen Engine/ASI is hiring a Cloud Security Engineer to help secure AWS infrastructure with a focus on IAM governance, auditing, and day-to-day security operations. This hybrid role is primarily remote for the Greater Los Angeles area, with periodic in-person presence at the Valley Village office for collaboration, meetings, project work, and occasional on-site coverage for critical IT needs. The position also includes Tier 2/3 escalations and the opportunity to support broader cloud security improvements.
What you’ll do
- Administer and secure AWS cloud infrastructure, including IAM, VPC, EC2, RDS, CloudWatch, and VPN, with support for routing and CIDR/IP range management.
- Manage AWS IAM policies, roles, and groups while enforcing least-privilege access controls and access review needs.
- Support identity governance activities such as access reviews, permission cleanup, role-based alignment, and SSO and MFA integrations.
- Participate in cloud security monitoring by triaging alerts, following up on vulnerabilities, and supporting incident response activities.
- Help enforce cloud security standards, secure configuration baselines, and least-privilege practices.
- Support regular security audits across cloud infrastructure, identity systems, endpoints, and SaaS platforms, including documenting findings, control gaps, and remediation actions.
- Track remediation progress and align security controls with established frameworks, including SOC 2, NIST CSF, ISO 27001, and CCPA.
- Improve operational visibility using CloudWatch dashboards, alerts, and notifications, and support AWS monitoring and alerting needs.
- Assist with AWS billing review, cost visibility, and cost optimization tracking.
- Support infrastructure configuration and automation using Terraform and AWS Systems Manager (SSM).
- Provide Tier 2/3 support for cloud systems, identity platforms, remote access, and security escalations from frontline support, including troubleshooting service interruptions and coordinating follow-up actions.
- Work on escalated tickets and larger cloud or security projects (examples include IAM redesign, audit remediation, and security tooling rollouts).
- Serve as an on-site backup to the IT Director at the Valley Village location for critical needs that require physical presence (such as hardware access, vendor visits, and office-specific troubleshooting).
- Maintain accurate documentation for AWS configurations, IAM policies, audit records, and security procedures, and share knowledge with internal stakeholders.
Requirements
- 2–5 years of experience in cloud infrastructure, cloud security, systems administration, or a related IT/security role.
- Hands-on experience with AWS, especially IAM, VPC, EC2, CloudWatch, and VPN, plus identity-related administration.
- Experience with IAM configuration, access control, permission reviews, security auditing, and cloud security responsibilities.
- Familiarity with security documentation, audit preparation, control validation, and remediation tracking.
- Working knowledge of SSO, MFA, least-privilege access, and identity governance concepts.
- Familiarity with Terraform, AWS Systems Manager (SSM), or other infrastructure automation tools.
- Networking fundamentals including TCP/IP, DNS, and VPN.
- Ability to troubleshoot Tier 2/3 operational issues and provide hands-on escalated support.
Technologies you’ll work with
AWS, IAM, VPC, EC2, RDS, CloudWatch, VPN, Terraform, AWS Systems Manager (SSM), SSO, MFA, SOC 2, NIST CSF, ISO 27001, CCPA, PowerShell, Python, Bash
Preferred (nice to have)
- AWS certifications, especially AWS Certified Security – Specialty, AWS Certified Solutions Architect – Associate, or AWS Certified SysOps Administrator – Associate.
- Familiarity with cloud security monitoring, vulnerability management, and incident response processes.
- Exposure to compliance or security frameworks such as SOC 2, NIST CSF, ISO 27001, or CCPA.
- Experience supporting enterprise security initiatives across SaaS, endpoint, identity, or collaboration environments.
- Interest in evaluating AI-driven tools for security and IT operations.
- Scripting and automation experience using PowerShell, Python, or Bash.
Compensation
$100,000 - $120,000 per year
Work arrangement
Hybrid in Valley Village, CA 91607. Primarily remote (Greater Los Angeles area) with bi-weekly on-site presence at the Valley Village office for in-person collaboration, meetings, project work, and on-site coverage when needed.
Benefits
- 401(k)
- 401(k) matching
- Dental insurance
- Employee assistance program
- Flexible spending account
- Health insurance
- Health savings account
- Life insurance
- Paid time off
- Retirement plan
- Tuition reimbursement
- Vision insurance
