Description

Lead cloud security architecture for the Data Center Exit migration to AWS EC2, designing secure multi-account Landing Zones and ensuring continuous monitoring across hybrid environments.

This role is on-site.

Responsibilities

• Design and implement AWS Landing Zone security, including IAM guardrails, SCPs, and centralized logging.
• Conduct application and infrastructure vulnerability assessments, defining remediation plans for identified gaps.
• Implement WAF rules, firewall policies, secure segmentation, and endpoint protection for migrated workloads.
• Integrate SIEM systems with AWS native security tools for continuous monitoring and threat detection.
• Produce security HLD/LLD documents, risk assessments, and operational security runbooks for compliance.

Required Skills

• 10+ years of experience in AWS cloud security architecture, specifically with IAM, KMS, GuardDuty, and CloudTrail.
• Hands-on experience designing secure AWS multi-account Landing Zones and enterprise security guardrails.
• Proficiency with VAPT tools such as Nessus, Qualys, Burp Suite, Fortify, and Checkmarx.
• Strong understanding of AWS WAF, Shield, network segmentation, and IDS/IPS management.
• Knowledge of OS-level security for Windows Server 2016–2025 and RHEL 7/8/9.
• Experience securing Java, .NET, and integration-heavy workloads (e.g., TIBCO ESB).
• Understanding of database security for Oracle 19c, Exadata on AWS, and SQL Server.
• Ability to apply Zero Trust, least privilege, and encryption principles to EKS and hybrid cloud migrations.

Preferred Skills

• Experience with Oracle Exadata on AWS and SQL Server middleware security flows.
• Familiarity with secure deployment practices, code reviews, and remediation of development gaps.

Key Skills

Education

Any Graduate