Senior Cloud Security Architect :: Bethesda, MD (Hybrid/Remote)

Seeking for an experienced professional to lead the design and implementation of secure cloud infrastructure across our AWS-based environments. This role focuses on securing network boundaries, containerized workloads, cloud-native data storage, and overall cloud infrastructure components. You will be the security expert in cloud architecture projects, ensuring all designs align with best practices and compliance requirements. Core Work Activities:

• Design and maintain secure architectures for cloud infrastructure in AWS, AliCloud, and other cloud services.
• Implement and validate network segmentation, ingress/egress controls, and virtual firewall configurations.
• Secure containerized workloads in Amazon EKS or self-managed Kubernetes clusters.
• Collaborate with DevOps and platform teams to integrate security into CI/CD pipelines.
• Ensure secure configuration of cloud-native storage solutions.
• Evaluate and enforce policies around public access and data loss prevention.
• Ensure compliance with internal policies and external regulatory requirements.
• Contribute to threat modeling, risk assessments, and architecture review processes.
• Define and implement logging and monitoring strategies.
• Collaborate with Security Operations and Incident Response teams.
• Conduct security and privacy technology research and assessments.
• Consult with customers to gather and evaluate functional requirements.
• Provide advice and recommendations on cloud security topics.
• Manage and measure information security implications within the organization.

• Must have a Bachelor’s or Master’s degree in Computer Science, Information Security, or related field, or equivalent professional experience.
• Must have 7 years of experience in Cybersecurity with at least 3 years focused on cloud security in AWS.
• Must have hands-on expertise in AWS services, Kubernetes security, and Infrastructure-as-Code security.

Preferred:

• Cloud Security Certifications such as AWS Certified Security - Specialty, AWS Certified Solutions Architect, or similar.
• Experience securing workloads across AWS, Azure, and GCP.
• Familiarity with Zero Trust principles and secure service-to-service communication.