Cloud Security Architect (AWS Focus)

Job Title: Cloud Security Architect (AWS Focus)

Job Summary

We are seeking an experienced Cloud Security Architect with deep expertise in Amazon Web Services (AWS) to design, implement, and govern secure cloud architectures. This role will lead cloud security strategy, define best practices, and ensure compliance across enterprise AWS environments. The ideal candidate will have strong hands-on experience in cloud-native security controls, DevSecOps, identity and access management, and regulatory compliance frameworks.

Key Responsibilities

• Design and implement secure, scalable, and resilient AWS cloud architectures.

• Develop and enforce cloud security standards, policies, and governance frameworks.

• Lead security architecture reviews for AWS workloads and applications.

• Implement and manage AWS security services (IAM, KMS, GuardDuty, Security Hub, WAF, Shield, etc.).

• Design secure network architectures (VPCs, Transit Gateway, PrivateLink, VPN, Direct Connect).

• Implement identity and access management (IAM roles, policies, federation, SSO).

• Architect encryption strategies for data at rest and in transit.

• Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps).

• Conduct threat modeling, risk assessments, and vulnerability remediation planning.

• Monitor cloud environments for security incidents and ensure rapid response.

• Ensure compliance with regulatory standards (SOC 2, ISO 27001, HIPAA, PCI-DSS, etc.).

• Provide technical leadership and mentorship to engineering teams.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.

• 5-7+ years in Cybersecurity with a dedicated focus on Security Architecture or Cloud Engineering.

• 5+ years of hands-on experience with AWS cloud architecture.

• Migration Experience: Proven track record of supporting cloud migration projects (on-prem to cloud or hybrid).

• Strong knowledge of AWS services including EC2, S3, RDS, Lambda, ECS/EKS, VPC.

• Deep understanding of IAM, network security, encryption, and zero-trust principles.

• Experience implementing Infrastructure as Code (CloudFormation, Terraform).

• Familiarity with security monitoring and SIEM solutions.

• Architectural Competence: Experience conducting design reviews, architectural assessments, and validating service configurations.

• Experience with container security and Kubernetes security (EKS).

• Strong understanding of compliance and governance frameworks.

Preferred Qualifications

• AWS Certified Solutions Architect – Professional

• AWS Certified Security – Specialty

• CISSP, CCSP, or equivalent certifications

• Experience with multi-cloud environments (Azure/Google Cloud Platform) is a plus

• Knowledge of automation and scripting (Python, Bash)

Key Skills

Cloud Security Architecture
Risk Assessment & Threat Modeling
Identity & Access Management
Network & Application Security
DevSecOps Integration
Incident Response & Monitoring
Compliance & Governance
Cloud Platform: AWS (Primary focus).
Identity & Access: Okta, AWS IAM, SailPoint.
Infrastructure: Terraform, Kubernetes/Containers.
Security Tools: Palo Alto, Splunk (or similar SIEM), vulnerability scanning tools.
Documentation: Visio, LucidChart, Confluence.