idexcelNew York, NY
Senior Cloud Security Architect
Senior Cloud Security Architect
Senior Cloud Security Architect
idexcelNew York, NY
Apply for this role (opens in a new tab)today
Job Title: Senior Cloud Security Architect
Location: Washington, DC / Remote. The successful candidate must demonstrate:
- Deep expertise across primarily AWS and some Azure, networking, identity, security, and Infrastructure as Code
- A history of defining enterprise standards, reference architectures, roadmaps, and governance
- Strong infrastructure engineering credentials prior to moving into architecture
- Experience influencing engineering, security, platform, and executive stakeholders
- Success operating in large, complex, regulated environments
- Exceptional communication and executive presence Please submit only candidates you would confidently place in front of a CTO, Chief Architect, or Architecture Review Board. Quality is more important than quantity. I would rather review one exceptional candidate than ten marginal fits.
Minimum Qualifications:
- Must possess at least 7 years of IT experience with broad knowledge and an understanding of IT areas such as: Architecture, Infrastructure setup, management, Operating Systems, Database, various types of Applications, Network, and Cloud implementations.· Must possess at least 5+ years of strong hands-on experience in Cloud infrastructure and applications· Strong understanding of cloud infrastructure components (server, storage, network, security, data, and applications) to deliver end to end AWS cloud Infrastructure solutions.· Design and implement secure cloud architectures aligned with security best practices.· Define cloud security standards, governance frameworks, and security guardrails.· Lead security architecture reviews for cloud infrastructure and applications.· Develop and maintain AWS landing zones, multi-account strategies, and security baselines.· Architect identity and access management solutions using AWS IAM, IAM Identity Center, and least-privilege principles.· Design and implement network security controls including VPC architecture, segmentation, private connectivity, WAF, and security groups.· Lead cloud threat modeling, risk assessments, and security reviews.· Drive cloud security automation using Infrastructure as Code (Terraform, CloudFormation).· Oversee vulnerability management, cloud posture management, and remediation efforts.· Mentor junior cloud security engineers and provide technical guidance.· Support regulatory compliance initiatives (NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA as applicable).· Partner with development, infrastructure, and security operations teams to implement DevSecOps controls.· Deep expertise in AWS security services like IAM, Control Tower, Security Hub, Guard Duty, Config, CloudTrail, KMS, Secrets Manager etc.…,· Strong understanding of Zero Trust and cloud security architecture principles.· Experience designing secure multi-account AWS environments.· Expertise in cloud networking and security architecture.· Strong scripting and automation skills (Python, PowerShell, Bash).· Experience with Infrastructure as Code.· Knowledge of container (ECS) and Kubernetes security (EKS).· Experience integrating AWS/Azure security controls with SIEM platforms like Microsoft Sentinel.· Take ownership of issues, with a sense of urgency, and using sound judgement to resolve within service levels.· Ability to work independently as well as work well with others in an integrated team environment and must be self-motivated.· Must possess strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self-motivated.
Also on the board Same function, level within a rung
Level
Lead
Location
New York, NY
Occupation
Computer Systems Engineers/Architects
Industry
Computer Systems Design Services
Posted
today