Description

Job Summary

We are looking for an experienced AWS Security Architect responsible for designing, implementing, and governing enterprise cloud security across AWS environments. The role requires expertise in cloud security architecture, Zero Trust, IAM, compliance frameworks, and DevSecOps practices while ensuring security governance and compliance across enterprise cloud platforms.

Key Responsibilities

Cloud Security Architecture

• Design and maintain enterprise cloud security architecture, standards, and guardrails
• Conduct security architecture reviews for cloud initiatives
• Drive adoption of Zero Trust Architecture across cloud platforms

Identity & Access Management

• Design and enforce IAM frameworks in Amazon Web Services
• Implement least privilege access, SSO, federation, and privileged access management

Compliance & Governance

• Align security controls with frameworks such as
• NIST Cybersecurity Framework
• CIS Benchmarks
• ISO/IEC 27001
• PCI DSS
• SOC 2

Monitoring & Threat Detection

• Define monitoring strategies using SIEM / SOAR platforms
• Collaborate with SOC and Incident Response teams for threat detection and mitigation

DevSecOps & Automation

• Integrate security into CI/CD pipelines
• Implement Infrastructure as Code (IaC) security best practices using Terraform
• Automate security scans, compliance checks, and remediation workflows

Container & Cloud Workload Security

• Architect security for Kubernetes, containers, and serverless environments
• Manage container security including image scanning and runtime protection

Data Protection

• Define enterprise data protection strategies including encryption, tokenization, and key management
• Ensure secure configurations for cloud storage, databases, and services

Required Skills

• Expertise in Amazon Web Services security services
• Experience with AWS security tools:
• AWS Security Hub
• Amazon GuardDuty
• Amazon Inspector
• Strong understanding of:
• Identity & Access Management (IAM)
• Network Security
• Encryption & Key Management
• Experience with security platforms:
• CSPM (Cloud Security Posture Management)
• CIEM (Cloud Infrastructure Entitlement Management)
• CWPP (Cloud Workload Protection Platforms)
• Hands-on experience with:
• Terraform (IaC)
• DevSecOps & CI/CD security

Key Skills

Education

Any Graduate