AWS Security / DevSecOps Contractor Needed This Week — Secrets Manager, IAM, EC2 Hardening

We are looking for an AWS Security / DevSecOps contractor for a short, urgent security hardening sprint. We need someone who can start immediately and complete the core setup by Friday. Context: We have an AWS server setup used for internal scripts, API-based workflows, and credential-based integrations. We want to make the environment more secure before giving broader access to team members or contractors. Main goals: Move API keys and sensitive credentials into AWS Secrets Manager Remove secrets from code, config files, and .env files where possible Set up least-privilege IAM roles and access levels Create clear separation between admin, developer, read-only, and script/operator access Restrict who can run specific scripts or workflows Review EC2 access, SSH access, security groups, and open ports Preferably move server access toward AWS Systems Manager Session Manager instead of open SSH Enable or review CloudTrail, GuardDuty, CloudWatch logging, and basic security alerts Review GitHub/deployment access if relevant Create a short written runbook explaining who has access to what, where secrets are stored, and how scripts should be run safely This is not meant to be a full penetration test or formal compliance audit. We need practical AWS hardening for a startup environment, with a focus on access control, secrets management, auditability, and reducing the chance of mistakes. Requirements: Strong AWS IAM/security experience Experience with AWS Secrets Manager, EC2, CloudTrail, GuardDuty, CloudWatch, and Systems Manager Comfortable working quickly and documenting changes clearly Able to explain the access model in plain English Available to start today or tomorrow Able to complete the core setup by Friday Please include in your response: Relevant AWS security experience Examples of similar hardening projects Whether you can start immediately Your hourly rate or fixed project estimate How you would structure access for humans versus scripts/services We are looking for someone practical, careful, and fast. Security matters here, but we need a focused sprint rather than a long enterprise audit.