Cloud Engineer – Fidelity – CGI

Over 5 Years of strong experience with cloud platforms (AWS) and native event systems. Development experience with Python, or similar languages for backend and automation work. Strong experience with CI/CD pipelines, infrastructure as code (Terraform, CloudFormation, OpenTofu), and DevOps practices. Experience with Cloud Security Concepts, NIST Framework, Security Controls, CloudTrail, logging & monitoring telemetry, and security event correlation. Good to have – hands-on experience with CSPM (Cloud Security Posture Management) tools such as Wiz, Rapid7 (DivvyCloud), or similar platforms for continuous security monitoring and compliance. Experience with SIEM tools (Splunk, Datadog, or similar) for security event analysis, threat detection, and incident response. Strong expertise in Identity and Access Management (IAM) including role-based access control (RBAC), least privilege principles, IAM policy design, service control policies (SCPs), cross-account access patterns, and federation (SAML, OIDC). Understanding of encryption techniques and standards including data-at-rest encryption (KMS, customer-managed keys), data-in-transit encryption (TLS/SSL), key rotation strategies, and compliance with encryption standards (FIPS 140-2, AES-256). Experience with AWS Organizations, multi-account strategies, organizational units (OUs), consolidated billing, service control policies, and account governance frameworks….