Description

Design, implement, and govern enterprise cloud security across AWS environments, owning security architecture, compliance, and DevSecOps automation.

This role is on-site.

Responsibilities

• Design and maintain enterprise cloud security architecture, standards, and guardrails.
• Conduct security architecture reviews and drive Zero Trust adoption across cloud platforms.
• Define monitoring strategies using SIEM/SOAR and collaborate with SOC teams for threat detection.
• Integrate security into CI/CD pipelines and automate compliance checks using Terraform.
• Architect security for Kubernetes, containers, and serverless, including image scanning and runtime protection.

Required Skills

• 10+ years of experience in AWS security architecture and design.
• Hands-on expertise with AWS Security Hub, GuardDuty, and Inspector.
• Strong experience designing IAM frameworks, SSO, federation, and least privilege access.
• Proficiency with Terraform for Infrastructure as Code (IaC) security best practices.
• Deep understanding of Network Security, encryption, and key management.
• Experience integrating security into DevSecOps and CI/CD pipelines.
• Knowledge of compliance frameworks (NIST, CIS, ISO 27001, PCI DSS, SOC 2).
• Familiarity with CSPM, CIEM, and CWPP tools.
• Experience with container and cloud workload security.

Preferred Skills

• Experience with Cloud Infrastructure Entitlement Management (CIEM).
• Background in defining enterprise data protection strategies including tokenization.

Key Skills

Education

Any Graduate