AWS Governance Engineer (43242)

I a looking for an AWS Cloud Governance Engineer to design and enforce governance across a large-scale AWS environment. You will work with AWS Organizations, SCPs and compliance frameworks such as CIS or ISO to implement secure and scalable cloud controls. The role requires strong AWS experience, governance expertise and the ability to collaborate across teams.

🚀 Project
- design, implement and enforce governance controls across a multi-account AWS environment
- manage and optimize AWS Organizations structure, including OUs and landing zones
- design, implement and maintain Service Control Policies (SCPs)
- define and enforce governance for control plane (account structure, region restrictions, service enablement)
- implement governance for data plane services (S3, IAM roles, RDS, EKS and others)
- translate compliance frameworks (CIS, ISO, SOC2) into practical cloud implementations
- support incident handling, troubleshooting and resolution of governance-related issues
- collaborate with platform, security and application teams in enterprise environments
- contribute to CI/CD and GitOps-based governance processes

🎯 Skills
- strong experience with AWS governance (AWS Organizations, OUs, multi-account environments)
- hands-on experience with AWS in production-scale environments
- deep expertise in Service Control Policies (SCPs)
- experience with governance design for control plane and data plane
- experience implementing compliance frameworks (CIS, ISO 27001, SOC2) in AWS
- ability to troubleshoot governance and policy enforcement issues
- knowledge of GitOps principles and CI/CD (GitHub, GitHub Actions)
- strong communication and stakeholder management skills

💡 Nice to have
- AWS certifications (Solutions Architect, Security Specialty)
- experience in enterprise-scale environments with strong security and compliance requirements
- knowledge of IAM concepts
- experience with landing zone design