AWS Cloud Security Specialist
This assignment has been successfully filled.
Browse our open vacancies, or get in touch if your organisation is looking for a similar specialist.
About the assignment
A major organisation in the energy sector is modernising its cloud infrastructure on AWS. You'll lead security strategy for a multi-account platform (Atlas) that serves market participants across the Netherlands.
Your role bridges governance and enablement. You design Landing Zones, enforce security baselines, and help teams embed security into their architecture from day one. You turn complex compliance requirements into practical, automated controls.
This is a 6-month interim assignment (32–40 hours/week) with potential extension. You'll work hybrid from Amersfoort.
Your responsibilities
- Design, implement, and automate AWS security controls including IAM Identity Center, KMS, GuardDuty, Security Hub, and SCPs across multi-account environments
- Manage and improve the overall security posture of the AWS platform, including data perimeter measures and account governance
- Advise teams on secure-by-design architecture and conduct security reviews, threat modelling, and risk analyses
- Implement network security policies and controls via AWS Network Firewall, VPC segmentation, and routing in coordination with platform teams
- Operationalise secrets management with automated rotation policies, RBAC access, and audit evidence in line with compliance baselines
- Respond to security incidents and vulnerability alerts, classify and triage findings, and support forensic investigations
- Build Infrastructure-as-Code (Terraform modules) to ensure new AWS accounts comply with security baselines by default
- Enable and educate engineering teams through knowledge sessions, documentation, and pair-wise collaboration on security practices
Tech Stack & Tools
Platforms & Tooling
Frameworks & Standards
Cloud & Infrastructure
Methodologies
Certifications (preferred)
Must-haves
- 5+ years hands-on AWS security experience in enterprise and multi-account environments
- Deep expertise in IAM, SSO, permission boundaries, and identity federation
- Proven knowledge of KMS, encryption standards, and secrets management
- Strong experience with AWS security tooling (GuardDuty, Security Hub, Config, CloudTrail) and multi-account governance (SCPs, Control Tower)
- Solid Infrastructure-as-Code experience with Terraform best practices and policy-as-code
Nice-to-haves
- Experience implementing AWS Data Perimeter controls and architecture
- Hands-on incident response and forensics in cloud environments
- Penetration testing or red teaming background
What we offer
- Work on a mission-critical platform that accelerates the Netherlands' energy transition
- Hybrid working arrangement from Amersfoort with flexibility
- Collaborate with cross-functional teams across security, cloud, and product ownership
- Shape security strategy and embed best practices across multiple business units
- 6-month interim role with potential for extension
- Personal guidance from a dedicated MVPeople consultant who knows your niche
The process
Introduction
Phone call with your MVPeople consultant (within 24 hours)
Match & Brief
We discuss the assignment in detail and prepare you
Client meeting
Introduction to the client
Start
Contracting and onboarding
Details
Type
Freelance / ZZP (MVPeople)
Location
Amsterdam
Work model
Hybrid
Level
Senior
Industry
energie
Posted
19 January 2026
Job ID
48581
Contact
MVPeople Group
jobs@mvpeoplegroup.comLooking for a similar specialist?
We successfully filled this assignment. Is your organisation looking for a comparable profile? MVPeople introduces the first available specialists within 24 hours for interim, within 72 hours for permanent roles.
Contact us