Job Title: Senior Security Architect – Cloud Security (AWS)
Location: Philadelphia, PA
Job Summary
We are seeking an experienced Senior Security Architect with strong expertise in AWS Cloud Security, Zero Trust Architecture, Identity and Access Management (IAM), and enterprise security governance. The ideal candidate will be responsible for designing and implementing enterprise-level cloud security architectures, establishing security standards, and ensuring compliance across cloud environments.
The candidate should have hands-on experience with AWS security services, DevSecOps, Infrastructure as Code (Terraform), Kubernetes security, and security monitoring platforms.
Roles and Responsibilities
- Develop and maintain enterprise-level cloud security reference architectures, security patterns, and guardrails.
- Lead architectural security reviews for cloud initiatives and ensure alignment with enterprise security standards.
- Drive the adoption of Zero Trust Architecture across cloud platforms.
- Design, implement, and enforce AWS Identity and Access Management (IAM) frameworks.
- Establish least-privilege access models, identity federation, SSO, and privileged access management strategies.
- Implement and maintain security controls aligned with NIST, CIS Benchmarks, ISO 27001, PCI-DSS, and SOC 2 frameworks.
- Oversee Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), and security governance tools.
- Collaborate with SOC and Incident Response teams to improve cloud threat detection and response capabilities.
- Define monitoring strategies using SIEM/SOAR platforms and AWS-native security services.
- Integrate security controls into CI/CD pipelines in collaboration with DevOps teams.
- Promote secure Infrastructure-as-Code (IaC) practices using Terraform and AWS CloudFormation.
- Automate compliance checks, security scans, vulnerability assessments, and remediation workflows.
- Define enterprise data protection standards covering encryption, tokenization, key management, and data classification.
- Ensure secure configurations for cloud storage, databases, and other cloud data services.
- Architect secure Kubernetes, serverless, and containerized environments.
- Oversee container image scanning, registry governance, EKS hardening, and runtime protection.
- Serve as a senior security advisor to business and technical teams on cloud security risks and solutions.
- Support security audits, risk assessments, and enterprise governance processes.
- Communicate architectural decisions and security recommendations to executive leadership and engineering teams.
Required Technical Skills
- 8+ years of experience in Cybersecurity, with at least 3+ years in Cloud Security Architecture.
- Deep expertise in AWS security services and cloud security architecture.
- Strong understanding of Zero Trust Architecture, network security, IAM, identity federation, and encryption.
- Hands-on experience with AWS security services, including:
- AWS Security Hub
- Amazon GuardDuty
- Amazon Inspector
- AWS IAM
- AWS KMS
- AWS CloudTrail
- Experience with SIEM/SOAR, CSPM, CIEM, CWPP, and container security platforms.
- Strong proficiency in DevSecOps tools, Infrastructure as Code (IaC), and Terraform.
- Knowledge of compliance frameworks including NIST, CIS Benchmarks, ISO 27001, SOC 2, and PCI-DSS.
Preferred Skills
- Exposure to AWS AI-driven security and threat detection capabilities.
- Experience with Terraform, AWS CloudFormation, and CI/CD security integration.
- Strong Kubernetes and container security experience, including:
- Amazon EKS hardening
- Container image scanning
- Container registry security
- Runtime protection
- Experience implementing automated security controls and compliance monitoring.
- Strong communication, leadership, architectural design, and stakeholder management skills.
Ideal Candidate Profile
The ideal candidate will be a senior-level Cloud Security Architect who can define enterprise security strategies, lead cloud security architecture initiatives, and work closely with engineering, DevOps, SOC, and executive teams.
Candidates with strong AWS Security Architecture, Zero Trust, IAM, Terraform, DevSecOps, and Kubernetes security experience will be preferred.
Recommended sourcing title: Senior AWS Cloud Security Architect
Important screening keywords: AWS Security, Zero Trust, IAM, GuardDuty, Security Hub, Inspector, CSPM, CIEM, Terraform, DevSecOps, Kubernetes, EKS, SIEM/SOAR.
You received this message because you are subscribed to the Google Groups "NoviaJobs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to noviajobs+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/noviajobs/CAHbN6FbayKmJ517Nb146aeTvj6ex_Gtggk5tFLuc_4rekLBtog%40mail.gmail.com.