Hi,
The following requirement is open with our client.
Title : Cloud Security Architect
Location : Philadelphia, PA preferably / Remote
Duration : 12+ Months
Rate :$79/hr on W2
Position : W2 Position
Relevant Experience (in Yrs.):
Job Description:
• 8+ years in cybersecurity, with at least 3+ in cloud security architecture.
• Deep expertise in AWS security services.
• Strong understanding of Zero Trust, network security, IAM, and encryption.
• Experience with SIEM/SOAR, CSPM, CIEM, CWPP, and container security platforms.
• Proficiency in DevSecOps tooling and IaC (Terraform).
• Knowledge of compliance frameworks (NIST, CIS Benchmarks, ISO 27001, SOC 2, PCI).
• Exposure to AWS AI services such as AWS Security Hub, Amazon Inspector, Amazon GuardDuty — AI Driven Threat Detection
• IaC and automation experience using Terraform, CloudFormation, and CI/CD security integration.
• Kubernetes and container security skills covering EKS hardening, image scanning, and runtime protection
• Develop and maintain enterprise level cloud security reference architectures, patterns, and guardrails.
• Lead architectural reviews for cloud initiatives to ensure alignment with security standards.
• Drive adoption of Zero Trust architecture across cloud platforms.
• Design and enforce IAM frameworks in AWS.
• Establish least privilege models, federation, SSO, and privileged access strategies.
• Implement and maintain controls aligned with frameworks such as NIST, CIS, ISO 27001, PCI, and SOC 2.
• Oversee CSPM, CIEM, and security governance tooling to ensure continuous compliance and posture management.
• Collaborate with SOC and incident response teams to enhance cloud threat detection.
• Define monitoring strategies using SIEM/SOAR and cloud-native capabilities.
• Integrate security into CI/CD pipelines in coordination with DevOps teams.
• Promote secure Infrastructure as Code practices using Terraform
• Automate compliance checks, security scans, and remediation workflows.
• Define enterprise data protection standards for encryption, tokenization, key management, and data classification.