Location: Argentina

Work modality: Remote

Who are they?

• A fast-growing clean technology company building the energy and AI infrastructure that powers hyperscale data centers and mission-critical facilities.
• They develop and operate advanced power systems combining energy infrastructure, patented technology, and proprietary software to address complex resilience challenges.
• Their infrastructure supports AI data centers, energy storage systems, and distributed assets, creating a highly interconnected environment between cloud platforms and physical energy infrastructure.
• They operate internationally in a technology-driven environment where cybersecurity, reliability, and scalability are critical to protecting next-generation energy systems.

What will you do?

• Design and maintain a secure multi-account AWS environment, including AWS Organizations, SCPs, guardrails, centralized logging, security tooling accounts, and secure cloud baselines.
• Build and enforce cloud security controls through Infrastructure as Code (IaC) using CDK, CloudFormation, or Terraform.
• Define security standards, technical review gates, exception processes, and escalation mechanisms for identity, network, and infrastructure changes.
• Own AWS identity and access security using IAM Identity Center, federated with Microsoft Entra ID, implementing least privilege, role and permission models, MFA, privileged access, workload identities, and recurring access reviews.
• Design and secure cloud-to-site connectivity for plants, BESS sites, and remote energy assets, including VPNs, private connectivity, routing, firewalls, DNS, and network segmentation.
• Implement strong IT/OT segmentation, DMZ and broker architectures, device and certificate identity, and secure remote vendor access to field environments.
• Develop threat detection capabilities across AWS using GuardDuty, Security Hub, Detective, Inspector, Config, CloudTrail, KMS, and WAF.
• Analyze realistic attack paths—including credential compromise, privilege escalation, lateral movement, ransomware, and supply-chain attacks—and develop appropriate detection and mitigation strategies.
• Map security detections and controls to frameworks such as MITRE ATT&CK and ATT&CK for ICS, creating actionable incident response runbooks.
• Manage vulnerability identification and risk-based prioritization across workloads, container images, and dependencies, defining remediation SLAs and tracking exceptions.
• Partner with AWS engineering, IT, and OT security teams to drive security findings and remediation actions through completion.
• Continuously improve cloud security architecture, monitoring, documentation, and operational processes as the infrastructure scales.

What are they looking for?

• 5+ years of experience in cloud security, security-focused infrastructure, or cloud operations, with deep hands-on expertise in AWS.
• Proven production experience designing and securing multi-account AWS environments.
• Strong understanding of real-world attacker techniques, with the ability to analyze an intrusion path and define how to detect, contain, and mitigate it.
• Hands-on expertise in hybrid and site-to-cloud network security, including segmentation, VPNs, private connectivity, firewalls, routing, DNS, CIDR, and subnetting.
• Strong AWS IAM expertise, including roles, policies, permission sets, MFA, least privilege, privileged access, and IAM Iden
• tity Center federation, ideally with Microsoft Entra ID.
• Hands-on experience with AWS-native security services including GuardDuty, Detective, Security Hub, Inspector, Config, CloudTrail, KMS, and WAF.
• Strong Infrastructure as Code capabilities using Terraform, AWS CDK, or CloudFormation.
• Advanced English (B2–C1) for daily collaboration and technical security documentation.
• Experience securing OT/ICS or mission-critical environments is highly desirable, particularly IT/OT segmentation, Purdue-model architectures, and secure access to field assets.
• Familiarity with industrial protocols such as Modbus, DNP3, OPC UA, or MQTT is a strong plus.
• Experience in detection engineering, SIEM, threat modeling, vulnerability management, and incident response is highly valued.
• Familiarity with IEC 62443, NIST SP 800-82, AWS Control Tower, containers, serverless workloads, Wazuh, Datadog, or Grafana is advantageous.
• Certifications such as AWS Certified Security – Specialty, AWS Advanced Networking, CISSP, CCSP, GICSP, or GIAC GRID are valued but are not a substitute for hands-on experience.

Why join them?

• Take ownership of security at the intersection of AWS cloud infrastructure, cybersecurity, OT/ICS, BESS, and mission-critical energy systems.
• Design security architecture and controls with real impact on infrastructure supporting AI data centers and next-generation energy systems.
• Work on complex security challenges beyond traditional enterprise cloud environments, including protecting the boundary between physical sites and cloud infrastructure.
• Collaborate with international engineering, IT, and security teams in a highly technical and fast-growing environment.
• Competitive compensation and annual performance bonus eligibility.
• Professional development and growth opportunities within a mission-driven organization shaping the future of energy and AI infrastructure.