AWS Cloud Security Architect

Requirement/Must Have:

• 5 7+ years of experience in Cybersecurity with a focus on Security Architecture or Cloud Engineering.
• Deep hands-on expertise within the AWS ecosystem, including IAM, VPC, Security Groups, GuardDuty, and KMS.
• Proven experience supporting cloud migration initiatives (on-premises to cloud or hybrid environments).
• Experience conducting architecture design reviews and validating service configurations.
• Strong stakeholder communication skills with the ability to translate technical risks into business impact.
• Experience in data security governance, encryption standards, and data classification controls.
• Experience leading threat modeling sessions and secure design validation.

• Experience defining reusable cloud security patterns and guardrails.
• Experience evaluating migration strategies, including rehost, replatform, and refactor.
• Experience implementing compensating controls specific to data security risks.
• Experience working in cross-functional environments including enterprise architecture and information security teams.
• Experience aligning security controls with business priorities and user experience considerations.

• Define and document reusable AWS security patterns and guardrails for migration initiatives.
• Conduct deep-dive architecture design reviews and provide final security approval before production deployment.
• Assess and evaluate migration strategies to identify risks and recommend mitigation controls.
• Lead threat modeling sessions to identify and address vulnerabilities early in the design phase.
• Establish and enforce data protection, encryption, and classification requirements in AWS environments.
• Collaborate with application owners, infrastructure teams, and business stakeholders to align security with organizational goals.
• Translate security risks into clear business terms for executive and non-technical audiences.
• Support secure configuration and governance of cloud-native services.
• Drive secure cloud adoption while maintaining compliance and operational efficiency.

• Industry certifications such as CISSP, CCSP, or AWS Certified Security Specialty.
• Familiarity with NIST, ISO 27001, or SOC 2 control frameworks.
• Experience with Infrastructure as Code tools such as Terraform or CloudFormation.
• Experience securing CI/CD pipelines and DevSecOps practices.
• Experience with identity solutions such as Okta, AWS IAM, or SailPoint.
• Knowledge of security tools such as Palo Alto, Splunk, or similar SIEM platforms.
• Experience with Kubernetes and container security.

• Cloud security architecture design.
• AWS security services and governance.
• Threat modeling and risk assessment.
• Secure cloud migration strategy.
• Data security and encryption standards.
• Stakeholder communication and executive reporting.
• DevSecOps and Infrastructure as Code security.
• Cross-functional leadership and collaboration.