Principal Cloud Security Engineer

Role Overview Echo is seeking a Principal Cloud Security Engineer to build secure-by-default AWS platform patterns across a growing multi-account environment. This is a senior hands-on engineering role for someone who approaches security as a software and platform problem. What You Will Do Design and implement secure-by-default AWS account, organization, and baseline guardrail patterns across multi-account environments. Build and maintain reusable Terraform modules, policy-as-code, and infrastructure delivery patterns that prevent high-risk actions, reduce drift, and improve traceability. Why It Might Be a Fit The ideal candidate is equally comfortable with cloud infrastructure, modern application architectures, and developer workflows, and can work credibly across Security, Platform Engineering, Architecture, and software teams. Requirements 8+ years software engineering, platform engineering, SRE, infrastructure engineering, or cloud security Strong hands-on experience in AWS security engineering in multi-account environments Deep experience with infrastructure-as-code, especially Terraform, including reusable modules and tested patterns. Strong software engineering or platform engineering background; ability to write production-quality code in at least one modern language such as C#, Go, Python, Java, or TypeScript Experience with policy-as-code, preventive guardrails, configuration governance, or cloud-native policy enforcement Hands-on experience securing Kubernetes/EKS and serverless patterns in AWS Experience building detective and preventive controls for cloud logging, monitoring, and control plane integrity. Benefits bonus healthcare PTO retirement learning budget parental leave wellness visa/relocation remote flexibility stipends paid holidays Originally posted on Himalayas