Job Description
Title: AWS Cloud Security Engineer-12+
Required Candidate Location:    Secaucus, NJ     HYBRID/ A FEW TIMES A QUARTER – NO RELOCATION
Visas: USC/GC
Need LinkedIn, VISA DL
Â
NEW REQUIREMENT – TOP PRIORITY: Requirement Notes (Candidate Job description below) : We are seeking an experienced (10+ Years) Cloud Security Engineer with a proven track record leading the migration of on-premises network infrastructure into AWS. This role is built for a cloud-native security professional, not a traditional network engineer, who has hands-on experience migrating servers, firewalls, VPNs, and load balancers into AWS and re-architecting them using AWS-native services. The ideal candidate has already led this exact type of migration and can speak directly to the tradeoffs, architecture decisions, and security posture required to do it at scale.
****Â THIS IS A SENIOR PURE AWS CLOUD SECURITY POSITION (NOT NETWORK ENGINEER WITH SOME SECURITY) AND CANDIDATES NEED TO HAVE RECENT MIGRATION EXPERIENCE.
CANDIDATES MUST HAVE RECENT PROJECTS IN THE NY/NJ AREA AND BE WITHIN A ONE TO TWO HOUR COMMUTE TO THE DATA CENTER IN SECAUCUS, NJ. CANDIDATES MUST COME OUT OF VERY LARGE ENTERPRISES AND BE FOCUSED ON CLOUD SECURITY ARCHITECTURE. THE MANAGER WANTS TO SEE CERTIFICATIONS AND THIS POSITION WILL BE HYBRID WITH OCCASIONAL TRIPS (FEW TIMES A QUARTER) TO THE DATA CENTER IN SECAUCUS.
Â
****CANDIDATES MUST HAVE GOOD TENURE AND/OR LONG PROJECTS. CANDIDATES WITH RECENT LOCAL PROJECTS HIGHLY PREFERRED. – NO RELOCATION
Â
 *** Experience required on a resume and for submittal:
Â
1. How many years working with: Security Engineer – Not Network Engineer
2. How many years working with:Â AWS
3. How many years working with:Â Migration/Lift & Shift
4. How many years working with:Â Deploy and manage AWS security services including Security Groups, Network Firewall, WAF, Shield, GuardDuty, and IAM
5. How many years working with:Â Proficiency in Infrastructure-as-Code: Terraform, Ansible, and Python automation
Â
Â
Job Description:
Â
Cloud Security Engineer – AWS Infrastructure & Migration
We are seeking an experienced Cloud Security Engineer (10 years minimum) with a proven track record leading the migration of on-premises network infrastructure into AWS. This role is built for a cloud-native security professional, not a traditional network engineer, who has hands-on experience migrating servers, firewalls, VPNs, and load balancers into AWS and re-architecting them using AWS-native services. The ideal candidate has already led this exact type of migration and can speak directly to the tradeoffs, architecture decisions, and security posture required to do it at scale.
Core Focus: AWS Migration & Cloud Security
- Lead end-to-end migration of on-prem network infrastructure (firewalls, VPNs, servers) into AWS, replacing legacy hardware with cloud-native equivalents
- Architect AWS networking: VPCs, subnets, routing, Transit Gateway, VPN connections, and hybrid connectivity between on-prem and cloud environments
- Deploy and manage AWS security services including Security Groups, Network Firewall, WAF, Shield, GuardDuty, and IAM
- Implement AWS load balancing (ALB, ELB, Gateway Load Balancer) and CloudWatch observability for migrated infrastructure
- Own cloud security posture across AWS environments, ensuring compliance with SOX, PCI, and other cybersecurity frameworks
- Lead incident response and forensic investigations for cloud-based security events
Technical Requirements
- 5+ years working within AWS, with direct ownership of cloud security architecture
- Proven experience migrating on-prem network infrastructure (firewalls, VPNs, servers) into AWS, approached from the cloud side
- Proficiency in Infrastructure-as-Code: Terraform, Ansible, and Python automation
- Familiarity with CI/CD pipelines and GitHub workflows
- Working knowledge of Palo Alto or equivalent firewall technology, as it maps to cloud firewall concepts
- Comfortable in Linux/RHEL environments and command-line troubleshooting
- GCP experience a plus
Â
*** Please provide all the below information in the required format for Client submittal along with State ID or Driver’s License. All the requested details must be supplied for client submittal.
- Full Name:
- Candidates Rate:Â
- Candidates current (Now)Â Location:Â
- Availability to Interview: One Day’s notice
- Availability to Start:Â
- Email Address: Â Â
- Phone Number:Â
- Visa Status:
- Education – College/Year of graduation:
- Link to LinkedIn?Â
- Certifications (Please list)?         Â
Â
Â
Kind Regards,
Â
Deep Patel
Sr. Technical Recruiter
ZealHire Inc.
Direct: ​ (609) 337-2510
14 Wall Street 20th Floor | New York, NY 10005

Â