Description

You will lead cloud security architecture for large-scale AWS migration programs, ensuring secure Landing Zone implementation and governance guardrails.

Responsibilities

• Design IAM guardrails, SCPs, encryption models, and centralized logging to enforce multi-account security controls.
• Implement WAF policies, firewall rules, network segmentation, and endpoint protections to safeguard applications and workloads.
• Conduct vulnerability assessments, penetration testing cycles, and coordinate remediation activities across cross-functional teams.
• Integrate SIEM platforms with AWS native security services to deliver continuous monitoring and threat detection.
• Develop security documentation including HLD/LLD designs, risk assessments, and operational runbooks for secure cloud operations.

Required Skills

• 10+ years of overall IT experience with a strong hands-on background in AWS cloud security architecture.
• Proven expertise in AWS IAM, KMS, WAF, GuardDuty, CloudTrail, Landing Zone security, and multi-account governance.
• Strong experience designing secure architectures for large-scale cloud migrations.
• Ability to perform vulnerability assessments, threat monitoring, and implementation of enterprise security controls.
• Bachelor’s degree in computer science, Cybersecurity, Information Technology, or a related engineering field.

Preferred Skills

• Experience with SIEM platform integration and continuous monitoring strategies.
• Background in cross-functional remediation coordination.

Key Skills

Education

Any Graduate