---
title: 'AWS Cloud Security Engineer at ON.energy'
canonical: 'https://feeny.ai/job/aws-cloud-security-engineer-on-energy-argentina-7zr02d71wzgd'
type: 'job'
last_seen: '2026-09-07'
---

# AWS Cloud Security Engineer at ON.energy

- **Company:** ON.energy
- **Location:** Argentina
- **Posted:** 2026-08-26
- **Last confirmed live:** 2026-09-07
- **Apply:** https://job-boards.greenhouse.io/onenergy/jobs/4383277009

## Job description

ON.energy is building the backbone of energy and AI infrastructure powering grid-safe data centers and mission-critical facilities. The company supplies and operates hyperscale power systems that solve the toughest resilience challenges, delivering custom solutions for AI data centers, mission-critical facilities, and front-of-the-meter assets. ON recently announced a 5GW partnership, with 3GW currently under construction across multiple hyperscale data center campuses. With patented technology and proprietary software, ON.energy develops projects worldwide that set new benchmarks for resilience.

## Key Responsibilities

- The multi-account security foundation. AWS Organizations structure, SCPs, guardrails, a security tooling account, centralized logging, and secure baselines — delivered as infrastructure as code, not console clicks.
- Security standards and review gates. You can mandate controls and block deploys that introduce unacceptable risk, through review gates on identity and network changes, a documented exception path, and a defined escalation route.
- AWS identity and access. IAM Identity Center as the single front door, federated with Entra ID in partnership with IT, who own Entra as the source of truth. Role and group model mapping job functions to permissions; joiner/mover/leaver; privileged and break-glass access; workload identity; recurring access reviews. Hands-on at first, progressively automated so it stops being manual work.
- Cloud-to-site connectivity and segmentation — the defining part of this role. Every plant, BESS site, and remote asset that reaches our cloud does so over a path you design and defend: site-to-cloud VPN and private connectivity, hard segmentation between IT and OT zones, DMZ and broker patterns for site telemetry, certificate and device identity for field gateways, remote vendor access to sites, and strict control over what may initiate traffic in each direction. You own the cloud side of that boundary and share the path itself with the OT security owner.
- Threat detection, monitoring, and mitigation. You are expected to know how attacks actually run — credential and token abuse, cross-account privilege escalation, exposed control and management interfaces, lateral movement from a compromised site network into cloud, supply-chain and dependency compromise, ransomware staging — and to build the monitoring that catches them. GuardDuty, Security Hub, Detective, Inspector, Config, and CloudTrail tuned for real signal-to-noise, detections mapped to MITRE ATT&CK and ATT&CK for ICS, runbooks the wider team can execute, and the mitigations driven to done.
- Vulnerability management. Scanning coverage across workloads, images, and dependencies; risk-based triage and prioritization; remediation SLAs and exception handling; posture reporting. You identify and prioritize; the AWS engineers remediate in the workloads they own.

## Key Requirements

- 5+ years in cloud security, security-focused infrastructure, or cloud operations, with deep hands-on AWS.
- Production experience in multi-account AWS environments.
- Demonstrable command of attacker techniques and the detections and mitigations that counter them — you can walk an intrusion path end to end and explain how you would catch it, contain it, and close it.
- Hybrid and site-to-cloud network security: segmentation, VPN, private connectivity, firewalls, routing, DNS, CIDR and subnetting — securing connections between cloud and physical facilities.
- Strong AWS identity: roles, policies, permission sets, MFA, least privilege, access reviews; IAM Identity Center federated with an external IdP, ideally Microsoft Entra ID.
- AWS-native security services: GuardDuty, Detective, Security Hub, Inspector, Config, CloudTrail, KMS, WAF.
- Infrastructure as code — CDK, CloudFormation, or Terraform. You build controls, you don't click them.
- Advanced English (B2–C1) for daily work with English-speaking teams and written security documentation.

## Preferred Qualifications

- Security experience in OT- or ICS-adjacent environments: IT/OT segmentation, Purdue-model zoning, secure remote access to field sites, and protocols such as Modbus, DNP3, OPC UA, or MQTT crossing into cloud.
- Detection engineering and SIEM work; threat modelling; incident response you have personally run.
- Regulated or compliance-driven environments where access control, monitoring, and audit evidence are held to an external standard.
- Turning scanner output and audit findings into prioritized, actionable work for engineers who do not report to you.
- Troubleshooting security, identity, networking, and infrastructure issues across cloud and hybrid environments.
- Landing zones, Control Tower, and security account patterns.
- IEC 62443 or NIST SP 800-82 familiarity.
- Containers and serverless workloads.
- Energy, utilities, or other mission-critical environments.
- Wazuh, Datadog, Grafana, or similar.
- Security documentation and ADRs.

Certifications

Valued as a signal, not a substitute for experience: AWS Certified Security – Specialty; AWS Certified Advanced Networking – Specialty; AWS Certified Solutions Architect; GICSP or GIAC GRID; CISSP; CCSP; Microsoft Certified: Identity and Access Administrator Associate.

## #LI-AD1

For US-based roles - What you’ll get:

- Competitive salary + annual performance-based bonus eligibility
- Medical, dental, and vision insurance
- 401(k) with company match
- Paid time off and company holidays

For Mexico-based roles - What you’ll get:

- Competitive salary + annual performance bonus eligibility
- Christmas Bonus (Aguinaldo): 30 days
- Major medical expenses and life insurance
- Paid time off and holidays (per local policy)

For all roles:

- Professional development and growth opportunities
- Opportunity to grow with a mission-driven team shaping the future of clean energy
- Equal Opportunity: ON.energy is committed to equal employment opportunity and to maintaining a work environment free of harassment, discrimination, or retaliation.
- Accommodations: If you need an accommodation during the application process, email recruitment@onenergystorage.com
- Benefits vary by role and location and are subject to change.

Agency Notice: ON.energy does not accept unsolicited resumes from staffing agencies, search firms, or third-party recruiters. Resumes submitted without a fully executed Master Services Agreement (MSA) and a written request from an authorized member of our Talent Acquisition team will be considered the property of ON.energy. No placement fees or compensation will be paid for unsolicited candidate submissions.

## About ON.energy

## Company Overview
- **One-liner**: ON.energy supplies and operates hyperscale power systems built to meet the world’s most demanding resilience challenges, delivering grid-safe energy and AI infrastructure through patented technology and proprietary software.
- **Entity Type**: Private (Series B, multiple debt financing rounds)
- **Headquarters**: Miami, Florida, United States
- **Founded**: 2016
- **Founders**: Alan Cooper (CEO & Co-Founder) and Ricardo De Azevedo (CTO & Co-Founder)

## Core Business
- **Primary Industry**: Energy Technology (energy storage, battery systems, critical power infrastructure)
- **Target Customers**: AI data centers, mission-critical facilities, grid-scale asset owners (B2B, enterprise, infrastructure)
- **Mission/Purpose**: To build the backbone of energy and AI infrastructure, making energy resilient, clean, abundant and affordable while solving the toughest power problems in the world.

## Products & Services
- **Hyperscale Power Systems**: Custom, end-to-end solutions for AI data centers and mission-critical facilities, combining advanced power electronics, battery storage and proprietary control software.
- **ON.command™ Energy Management System**: Proprietary software platform for managing gigawatt-scale deployments, optimizing grid stability, energy arbitrage, and uptime.
- **AI.UPS™ Platform**: Patented microgrid control system designed to deliver flickerless, full-facility protection with up to Tier 4 performance for mission-critical facilities.
- **Battery Energy Storage Systems (BESS)**: Grid-scale and commercial & industrial storage solutions for frequency regulation, peak shaving, and renewable integration.
- **Fault-Tolerant Architectures**: Engineered solutions for the most demanding environments, built with Tier-1 components backed by 20-year warranties.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed (private company)
- **Key Metric**: Total Funding: $262.6M (across multiple debt and equity rounds, including Series B led by Ultra Capital in 2023); Annual Revenue: $4.5M (per LinkedIn estimate, likely reflective of earlier stage); 3 GW+ operating & under construction; 10+ GW production capacity
- **Notable Investors/Partners**: Ultra Capital (Series B lead), SDCL Energy Efficiency Income Trust, Lombard Odier Investment Managers, Live Oak Bank, BridgePeak Energy Capital, Pathward
- **Growth Signals**: 143% headcount growth YoY (148 employees as of 2026), 875% job posting growth YoY (52 open positions), 75+ projects across the Americas, $77.6M debt financing in January 2025

## Competitive Advantages
- **Patented Technology**: Proprietary microgrid control systems (AI.UPS) and energy management software (ON.command) that set new global benchmarks for reliability and uptime (99.9% availability).
- **FEOC Compliant & U.S. Manufacturing**: Proudly engineered and built in America, meeting foreign entity of concern compliance – a key differentiator for domestic infrastructure projects.
- **Gigawatt-Scale Supply Chain**: 10+ GW production capacity with Tier-1 components and 20-year warranties, enabling rapid deployment at scale.
- **Track Record**: Over 150 years of combined team runtime, proven performance across industrial, manufacturing, infrastructure, transportation, and grid-scale storage.

## Strategic Focus
- **Grid-Safe AI Power**: Scaling hyperscale power solutions specifically designed for AI data centers, addressing grid volatility and power quality challenges.
- **Global Deployment**: Expanding across the Americas with a fully ramped supply chain and active projects in 9 countries (US, Mexico, Argentina, Peru, Chile, Canada, etc.).
- **Vertical Integration**: Continuing to develop proprietary hardware and software in-house, from R&D to commissioning and asset management.

## Why Work Here
- **Culture**: Described as dynamic, innovative, and far from traditional corporate mold – autonomous teams with high trust, fast decision-making, and a focus on impact. “If you want predictable, this isn’t it. If you want impact, welcome.”
- **Work Environment**: Cross-functional teams spanning engineering, product, finance, and operations. Locations include Miami (HQ), Houston, Mexico City, Atlanta, and field roles across the US. Hybrid/remote flexibility likely varies by role.
- **Growth Opportunities**: Rapidly scaling company (143% headcount growth) with opportunities in supply chain, project engineering, R&D, software, and IT. Emphasis on professional growth and learning from “the brightest minds in technology, product engineering, finance, and more.”
- **Mission-Driven**: Work that directly impacts energy resilience, clean energy adoption, and AI infrastructure – a chance to solve some of the toughest power problems globally.

## Sources
1. [ON.energy Website](https://www.on.energy/)
2. [ON.energy Greenhouse Careers](https://job-boards.greenhouse.io/onenergy)
3. [ON.energy LinkedIn](https://www.linkedin.com/company/on-es)
4. [ON.energy Team Page](https://www.on.energy/team)
5. [CB Insights - On.Energy Profile](https://www.cbinsights.com/company/onenergy)

## Other roles at ON.energy

- [Agile Coach - IT](https://feeny.ai/job/agile-coach-it-on-energy-mexico-city-mexico-city-xfkjammhnt5h) — Mexico City Mexico City, Mexico
- [Senior Controls Designer](https://feeny.ai/job/senior-controls-designer-on-energy-houston-texas-hwzbce3gmc9m) — Houston Texas, United States
- [IT Support](https://feeny.ai/job/it-support-on-energy-reston-virginia-mxb91923whbk) — Reston Virginia, United States
- [Enterprise Application Support Specialist](https://feeny.ai/job/enterprise-application-support-specialist-on-energy-houston-texas-qd98n6fgk2my) — Houston Texas, United States / Miami Florida, United States
- [Junior Simulation Engineer - EMS](https://feeny.ai/job/junior-simulation-engineer-ems-on-energy-mexico-dgtdpzmc0wnn) — Mexico
- [Corporate Paralegal I](https://feeny.ai/job/corporate-paralegal-i-on-energy-miami-florida-spf0nysqx5qp) — Miami Florida, United States
- [AI Engineer](https://feeny.ai/job/ai-engineer-on-energy-houston-texas-1f8svafy65y5) — Houston Texas, United States
- [Test Engineer - R&D](https://feeny.ai/job/test-engineer-r-d-on-energy-houston-texas-jpxekf1q6kdd) — Houston Texas, United States
- [Senior Cybersecurity Engineer - OT/SCADA](https://feeny.ai/job/senior-cybersecurity-engineer-ot-scada-on-energy-houston-texas-9wx6jzb2j7dy) — Houston Texas, United States
- [Staff Network Architect - OT/SCADA](https://feeny.ai/job/staff-network-architect-ot-scada-on-energy-houston-texas-wzaf91g4t2f5) — Houston Texas, United States