Description

You will lead cloud security architecture for AWS migrations and enterprise guardrails.

This role is on-site.

Responsibilities

• Design and implement AWS Landing Zone security, including IAM guardrails, SCPs, and logging.
• Lead cloud security architecture for Data Center Exit migrations to AWS EC2.
• Conduct application and infrastructure vulnerability assessments and define remediation plans.
• Implement WAF rules, firewall policies, secure segmentation, and endpoint protection.
• Define and enforce cloud security baselines aligned with CIS, NIST, and ISO controls.

Required Skills

• 5+ years of experience in AWS cloud security architecture.
• Strong expertise in IAM, KMS, GuardDuty, CloudTrail, and Security Hub.
• Deep understanding of AWS Landing Zone, SCPs, governance, and enterprise security guardrails.
• Proficiency with VAPT tools: Nessus, Qualys, Burp Suite, Fortify, and Checkmarx.
• Knowledge of OS-level security for Windows Server 2016–2025 and RHEL 7/8/9.
• Experience with EKS workload security, including pod/network policies and image scanning.
• Understanding of database security for Oracle 19c, Exadata on AWS, and SQL Server.
• Ability to apply Zero Trust, least privilege, and secure-by-design principles.

Preferred Skills

• Experience securing Java, .NET, and TIBCO ESB integration-heavy workloads.
• Familiarity with hybrid cloud migrations and AWS migration tooling.

Key Skills

Education

Any Graduate