• Build and operate production security controls across our AWS and Kubernetes platform. • Design and implement guardrails that make secure delivery the default—covering CI/CD security automation, software supply chain controls, and Kubernetes policy enforcement. • Co-own AWS security guardrails with Platform/SRE (IAM patterns, logging and detection, network and encryption baselines). • Partner with Security/GRC on control interpretation and evidence needs; implements controls in engineering systems and pipelines. • Maintain CI/CD security controls that scale across repositories and teams (reusable pipeline components, templates, and standards). • Improve container security end-to-end: base-image strategy, vulnerability scanning, registry controls, image signing, and promotion workflows.