Need: Solution Architect for Alpharetta, GA

Job Title: Solution Architect – AWS Cloud Security

Location: Alpharetta, GA
Duration: 12+ Months
Experience Required: 10+ Years

---

Role Overview

We are seeking an experienced Solution Architect to design, implement, and govern AWS cloud security and compliance solutions supporting E*TRADE operations within Morgan Stanley.

This role is responsible for ensuring AWS environments align with enterprise security policies, regulatory requirements, and industry best practices, while driving secure-by-design architecture, automation, and operational excellence.

---

Key Responsibilities

Assessment & Roadmap Development

• Lead discovery and assessment of AWS accounts, IAM roles, SCPs, and Terraform modules

• Identify security gaps and develop a phased remediation roadmap with stakeholders

---

Security Policy & Control Design

• Design and validate AWS Service Control Policies (SCPs) to enforce:

  • Least privilege access

  • Root user lockdown

  • IP whitelisting

• Ensure policies are tested in non-production environments prior to rollout

---

IAM Role Management

• Audit and refactor IAM roles to eliminate over-permissioning

• Deprecate shared roles and implement function-specific, least-privilege access

• Establish clear permission boundaries and governance standards

---

Break-Glass Access

• Design and document secure, auditable break-glass access procedures

• Enforce MFA, time-bound access, and approval workflows

---

Infrastructure as Code (IaC)

• Review and enhance Terraform modules to ensure secure-by-default configurations

  • Encryption

  • Tagging

  • Logging

• Oversee peer reviews and validation in staging environments

---

Testing, Validation & Production Rollout

• Lead functional and negative testing of IAM and SCP changes

• Ensure compliance with security benchmarks and operational requirements

• Oversee production deployment, monitor for anomalies, and ensure full documentation and knowledge transfer

---

Required Skills & Experience

Cloud Security & Architecture

• Deep expertise in AWS security controls, including:

  • IAM

  • SCPs

  • Account governance

• Strong knowledge of cloud compliance frameworks relevant to financial services

---

Solution Design & Leadership

• Proven ability to design secure, scalable cloud architectures

• Translate business and regulatory requirements into technical solutions

• Experience leading cross-functional teams and stakeholder workshops

---

DevOps & Automation

• Hands-on experience with:

  • Terraform

  • CI/CD pipelines

  • Cloud automation and governance tooling

---

Communication & Documentation

• Strong documentation, presentation, and stakeholder management skills

• Ability to communicate architectural decisions to technical and non-technical audiences

---

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, or related field

• 10+ years of IT experience, with 5+ years in cloud architecture and security roles

• Preferred certifications:

  • AWS Certified Solutions Architect

  • TOGAF

  • CISSP

---

Key Competencies

• AWS Cloud Security & Compliance

• IAM & Service Control Policies (SCPs)

• Terraform & Infrastructure as Code

• Cloud Governance & Risk Management

• Technical Leadership & Architecture

---

Thanks & Regards
Ishita Bali
Novia Infotech LLC
4421 Avenida Ln, McKinney, TX 75070
Email: ishita.b@noviainfotech.com

--
You received this message because you are subscribed to the Google Groups "NoviaJobs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to noviajobs+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/noviajobs/CAGiqXECYNzSheUVwUdt6VbqNe6iaF%2BBSdkQ%3DPaNdsK8NKA9KEA%40mail.gmail.com.