Cloud Security Engineer

At City Electric Supply, we encourage our people to ask questions, create, discover, and learn.
If you're passionate about what you do and think you can contribute, we encourage you to apply even if you don't meet every requirement listed. Your unique experiences and perspectives could be exactly what we need to grow and innovate.
Let's build something great together!

About CES:
CES is a global electrical wholesaler, providing electrical products to people in the industry known for its extensive range of products and commitment to customer service. Founded in 1951 in the United Kingdom, it has since expanded to over 1,000 locations across multiple countries, including the United States, Canada, Australia, and Europe. 
We in IT are delivering value to our business and our customers with the innovative solutions that enable our business to better serve our customers today and in the future. We recognize that technology and data are at the forefront of this. 
Our Global IT team deliver a portfolio of transformative work, expand our digital options, upgrade and future-proof our systems to place us at the forefront of the marketplace.  To do this, we need talented and creative people across all areas to join us in delivering our evolution to enable our forward-thinking business over the next few years and beyond, and this is where you come in... 
Considering applicants who reside in the following states:  AL, AZ, AR, CA, CO, DE, FL, GA, IL, IN, KS, KY, MD, MA, MI, MS, MO, NV, NH, NJ, NC, OH, OK, PA, RI, SC, TN, TX, VA, WV, WI.
Summary:We are expanding our cloud security team and hiring a Cloud Security Engineer with a strong focus on AWS Cloud Development Kit (CDK). This role is highly development-focused and will be responsible for writing infrastructure-as-code primarily using AWS CDK with TypeScript. You will help lead the codification of security policies and reusable modules and work closely with cloud and security engineers to implement secure, scalable cloud infrastructure. This role requires hands-on experience with CDK and Python to support tooling, automation, and enforcement of security measures across multiple cloud environments.

Essential Job Functions:

• Design, develop, and maintain infrastructure as code using AWS CDK with a strong emphasis on security best practices.
• Serve as the primary engineer codifying security policies and controls directly into reusable CDK constructs and modules.
• Collaborate with engineering teams to define and implement CDK patterns and guardrails across multi-account AWS environments.
• Write and support Python-based automation tools and integrate them with CDK stacks to ensure secure, scalable deployment.
• Support and mentor engineers by helping prioritize and implement security initiatives within cloud environments.
• Build technical solutions and security guardrails for CI/CD pipelines, ensuring secure deployment processes.
• Work closely with cloud, security, and DevOps teams to align CDK-based infrastructure deployments with governance and compliance requirements.
• Assist with implementing serverless technologies where applicable while maintaining strong security posture.
• Investigate and remediate cloud security risks by developing scalable code-based solutions.
• Drive IaC governance by helping shape best practices and processes around CDK usage across engineering teams.
• Document project workflows, infrastructure designs, and security policies to ensure knowledge sharing and maintainability across teams.
• Create and maintain technical documentation for cloud security projects, including architecture diagrams, implementation steps, and ongoing updates.

Education/Experience:

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent hands-on experience.
• 5+ years of professional experience in cloud security or infrastructure engineering.
• Minimum of 2–3 years of hands-on experience designing and deploying infrastructure using AWS CDK (Cloud Development Kit).
• Proficiency in TypeScript for CDK development and Python for automation tooling.
• Strong experience with AWS serverless services such as Lambda, API Gateway, Step Functions, and DynamoDB.
• Demonstrated ability to build reusable CDK constructs and modules that scale across environments.
• Experience supporting or leading security-first IaC initiatives in an enterprise environment.
• Familiarity with Terraform, preferred.

Competencies:

• Deep expertise in AWS CDK and its use in codifying infrastructure and security policies.
• Strong understanding of cloud security concepts, par