AWS Cloud Architect

Role: AWS Cloud Security Architect

Location: Richardson, TX/ Raleigh, NC/ Phoenix, AZ 9Onsite)

Job Summary:
We are looking for an experienced AWS Cloud Security Architect to design, implement, and govern secure cloud architectures across AWS environments. The ideal candidate should have strong expertise in AWS security services, cloud security architecture, IAM, networking, compliance, and security automation.

Key Responsibilities

• Design and implement secure, scalable AWS cloud architectures aligned with security best practices.
• Develop cloud security standards, policies, controls, and architecture patterns.
• Implement and manage AWS IAM, Organizations, SCPs, KMS, CloudTrail, GuardDuty, Security Hub, Config, and WAF.
• Design secure AWS networking using VPC, subnets, security groups, NACLs, Transit Gateway, PrivateLink, and VPN.
• Implement identity and access management, including least privilege, RBAC, federation, SSO, and privileged access.
• Conduct cloud security assessments, threat modeling, and risk analysis.
• Implement security controls for compute, storage, databases, containers, and serverless workloads.
• Integrate security into CI/CD and DevSecOps pipelines using automation and Infrastructure as Code.
• Develop security monitoring, logging, alerting, and incident-response capabilities.
• Ensure AWS environments comply with security and regulatory frameworks such as CIS, NIST, ISO 27001, SOC 2, and PCI DSS.
• Collaborate with DevOps, Cloud Engineering, Application Security, IAM, and Cybersecurity teams.
• Provide technical guidance and mentor cloud security engineers.

Must-Have Skills

• AWS Cloud Security Architecture
• AWS IAM / IAM Identity Center
• AWS Organizations & Service Control Policies (SCPs)
• AWS KMS, CloudTrail, Config, GuardDuty, Security Hub
• AWS WAF / Shield
• VPC, Security Groups, NACLs, Transit Gateway, PrivateLink
• Cloud security and Zero Trust principles
• Terraform / CloudFormation
• DevSecOps and CI/CD security
• Python, PowerShell, or Bash scripting
• Threat modeling, vulnerability management, and security monitoring
• Knowledge of NIST, CIS, ISO 27001, SOC 2, PCI DSS
• Strong understanding of networking, encryption, certificates, secrets management, and data protection