AWS Cloud Security Architect - Landing Zone & Cyber Resilience

(Alternates depending on seniority/framing: Sr. Cloud Security Engineer IRE/Clean Room, Principal Security Architect AWS Multi-Account, or Cloud Infrastructure Security Architect (EKS + Governance))., WS-1: AWS Security Agent cloud infrastructure design and implementation support WS-2 : (Security Lab): Design multi-account lab foundation, centralized logging (CloudTrail, VPC Flow Logs, Config), OU structure, SCPs, and automated account vending WS-3 (IRE & Clean Room): Design IRE account with WORM vault locking, cross-account/cross-region backup (3-2-1), CMKs, CyberArk break-glass, Macie integration, Network Firewall, Transit Gateway route isolation, and recovery orchestration WS-5: Design and implement Amazon EKS infrastructure configuration and the security lab environment Design Backup Audit Manager compliance framework Design Route 53 DNS isolation and hardened compute baselines Implement hardened compute baselines and secrets management Author IRE & Clean Room Architecture & Design Document and Security Lab Architecture Document Contribute to lab operations guide and account vending admin procedures”ed)” Thank you & Regards V S Durga Prasad | Sr. IT Recruiter E: | Desk Ph: 901-466-4708 Conch Technologies Inc |

Multi-account AWS architecture design, AWS Organizations, and landing zone governance Security Lab foundation and account vending design Isolated Recovery Environment (IRE) architecture: WORM vault, cross-account backup, recovery orchestration, Clean Room forensic environment Amazon EKS baseline and lab environment for testing security capabilities, Must Have Technical/Functional Skills Lead architecture decisions for AWS workloads aligned to well-architected principles Define and enforce cloud patterns, landing zones, and…