> Markdown version of [/jobs/ext/2083595-aws-cloud-security-architect-landing-zone-cyber-resilience](https://www.wearedevelopers.com/jobs/ext/2083595-aws-cloud-security-architect-landing-zone-cyber-resilience). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AWS Cloud Security Architect - Landing Zone & Cyber Resilience

- **Company:** Conch Technologies
- **Location:** New York, NY, United States (Remote available)
- **Experience:** Expert
- **Salary:** $147,250.0 - $190,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing, Cloud Computing Security, Cloud Engineering, Domain Name System (DNS), Key Management, Data Logging, Cyberark, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Route53
- **Published:** August 16, 2026
- **Apply:** https://www.careerjet.com/jobad/usb91648c9a1f8bca3c5fad59459c185b5

## About the Role

Multi-account AWS architecture design, AWS Organizations, and landing zone governance
Security Lab foundation and account vending design
Isolated Recovery Environment (IRE) architecture: WORM vault, cross-account backup, recovery orchestration, Clean Room forensic environment
Amazon EKS baseline and lab environment for testing security capabilities, Must Have Technical/Functional Skills Lead architecture decisions for AWS workloads aligned to well-architected principles Define and enforce cloud patterns, landing zones, and…

## Description

(Alternates depending on seniority/framing: Sr. Cloud Security Engineer IRE/Clean Room, Principal Security Architect AWS Multi-Account, or Cloud Infrastructure Security Architect (EKS + Governance))., WS-1: AWS Security Agent cloud infrastructure design and implementation support
WS-2 : (Security Lab): Design multi-account lab foundation, centralized logging (CloudTrail, VPC Flow Logs, Config), OU structure, SCPs, and automated account vending
WS-3 (IRE & Clean Room): Design IRE account with WORM vault locking, cross-account/cross-region backup (3-2-1), CMKs, CyberArk break-glass, Macie integration, Network Firewall, Transit Gateway route isolation, and recovery orchestration
WS-5: Design and implement Amazon EKS infrastructure configuration and the security lab environment
Design Backup Audit Manager compliance framework
Design Route 53 DNS isolation and hardened compute baselines
Implement hardened compute baselines and secrets management
Author IRE & Clean Room Architecture & Design Document and Security Lab Architecture Document
Contribute to lab operations guide and account vending admin procedures"ed)"
Thank you & Regards
V S Durga Prasad | Sr. IT Recruiter
E: | Desk Ph: 901-466-4708
Conch Technologies Inc |


## Related Videos

- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice)
- [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync)
- [Reliable scalability: How Amazon.com scales on AWS](https://www.wearedevelopers.com/videos/983-reliable-scalability-how-amazon-com-scales-on-aws)
- [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity)
- [Developers Communities in San Francisco - WeAreDevelopers LIVE from Corgi Cafe](https://www.wearedevelopers.com/videos/2144-developers-communities-in-san-francisco-wearedevelopers-live-from-corgi-cafe)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [From Prototype to Production: Build AI Agents with This Free 4-Course Learning Path](https://www.wearedevelopers.com/magazine/655-from-prototype-to-production-build-ai-agents-with-this-free-4-course-learning-path)
- [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event)