Solution Architect – Agentic AI, AWS Bedrock, & Cybersecurity

Role Overview

We are seeking a Senior Solution Architect to lead the technical design and execution of a strategic, AI-driven cybersecurity initiative [cite: 3]. This program aims to automate the remediation of enterprise cryptographic vulnerabilities across a portfolio of ~200 applications using autonomous LLM agents [cite: 3].

Operating initially within an isolated InfoVision AWS Sandbox before scaling to enterprise production, you will be the definitive technical authority driving this initiative [cite: 3, 4]. You will architect the multi-agent orchestration pipeline, integrate Large Language Models (LLMs), and ensure the seamless translation of enterprise security rules into executable Infrastructure-as-Code (IaC) templates [cite: 3]. This role requires a hands-on architectural leader who can bridge the gap between DevSecOps, Cloud Infrastructure, and Generative AI to deliver a scalable, long-term solution.

1. AI & Agentic Orchestration Architecture

Design the Agent Pipeline:

Architect cyclic graph-based state machines using LangGraph on AWS ECS Fargate, defining clear handoffs between the Scan, Classify, Plan, and Execute agents.

LLM Integration:

Oversee the integration of Amazon Bedrock and LLM APIs (Claude and Gemini), designing prompt structures and context-management logic to parse complex Software Bills of Materials (SBOM) and Cryptography Bills of Materials (CBOM).

RAG Implementation:

Architect a Retrieval-Augmented Generation (RAG) system using OpenSearch vector search to dynamically map scan findings against the established North Star rule dictionary.

2. Cloud Infrastructure & Security Design

Infrastructure Architecture:

Design and govern a secure AWS environment, including VPC, IAM, and CloudWatch, initially isolating the development sandbox and eventually scaling it into production-ready pipelines.

State & Approval Management:

Architect the state-management layer using DynamoDB to track remediation checkpoints and workflow progress.

Design the Reviewer Dashboard using Amazon API Gateway, AWS Lambda, and Amazon Cognito to enforce human-in-the-loop approval workflows.

CI/CD & DevOps Integration:

Oversee offshore AWS Cloud and DevOps engineers responsible for building automated execution pipelines using AWS CodeBuild, AWS Systems Manager (SSM), and Git-based pull request automation.

3. Technical Strategy & Template Governance

Rule-to-Template Mapping:

Own and govern the baseline mapping table, translating characteristic maps provided by the on-site data analysis team into logical frameworks required for Infrastructure-as-Code (IaC) remediation templates.

Vulnerability Simulation & Testing:

Guide the engineering team in accurately introducing industry-standard cryptographic vulnerabilities, such as TLS 1.2 configurations, AES-128 encryption, and hardcoded secrets, into reference applications to simulate real-world security scenarios during the initial development phase.

Cross-Functional Technical Alignment:

Serve as the technical bridge between the on-site security analysis teams and offshore AI engineering teams, ensuring that AI agents are designed and implemented to address the correct enterprise security requirements and technical constraints.

Required Qualifications

Experience:

10+ years of progressive experience in Cloud Architecture, Software Architecture, and enterprise technology solutions.

AWS Mastery:

Deep, demonstrable expertise in AWS networking, compute services (ECS/Fargate), and serverless and managed services, including DynamoDB, OpenSearch, API Gateway, and Lambda.

AWS Certified Solutions Architect – Professional certification is highly preferred.

Generative AI:

Hands-on architectural experience with Generative AI orchestration frameworks, including LangGraph and LangChain, and LLM APIs such as Amazon Bedrock, Claude, and Gemini.

DevSecOps:

Strong foundation in DevSecOps practices, Infrastructure-as-Code (IaC) using Terraform, and automated security remediation pipelines.

Security Acumen:

Ability to understand complex enterprise encryption standards and protocols, including TLS, IPsec, AES-256, and translate them into secure infrastructure configurations and remediation strategies.