Senior Cloud Security Architect

Develop and maintain AWS landing zones, multi-account strategies, and security baselines.

Architect identity and access management solutions using AWS IAM, IAM Identity Center, and least-privilege principles.

Design and implement network security controls including VPC architecture, segmentation, private connectivity, WAF, and security groups.

Lead cloud threat modeling, risk assessments, and security reviews.

Drive cloud security automation using Infrastructure as Code (Terraform, CloudFormation).

Oversee vulnerability management, cloud posture management, and remediation efforts.

Mentor junior cloud security engineers and provide technical guidance.

Support regulatory compliance initiatives (NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA as applicable).

Partner with development, infrastructure, and security operations teams to implement DevSecOps controls.

Deep expertise in AWS security services like IAM, Control Tower, Security Hub, Guard Duty, Config, CloudTrail, KMS, Secrets Manager etc.

Deep expertise across primarily AWS and some Azure, networking, identity, security, and Infrastructure as Code

A history of defining enterprise standards, reference architectures, roadmaps, and governance

Strong infrastructure engineering credentials prior to moving into architecture

Experience influencing engineering, security, platform, and executive stakeholders

Success operating in large, complex, regulated environments

Exceptional communication and executive presence

Please submit only candidates you would confidently place in front of a CTO, Chief Architect, or Architecture Review Board.

Quality is more important than quantity. I would rather review one exceptional candidate than ten marginal fits.

Minimum Qualifications

Must possess at least 7 years of IT experience with broad knowledge and an understanding of IT areas such as: Architecture, Infrastructure setup, management, Operating Systems, Database, various types of Applications, Network, and Cloud implementations.

Must possess at least 5+ years of strong hands-on experience in Cloud infrastructure and applications

Strong understanding of cloud infrastructure components (server, storage, network, security, data, and applications) to deliver end to end AWS cloud Infrastructure solutions.

Design and implement secure cloud architectures aligned with security best practices.

Define cloud security standards, governance frameworks, and security guardrails.

Lead security architecture reviews for cloud infrastructure and applications., Strong understanding of Zero Trust and cloud security architecture principles.

Experience designing secure multi-account AWS environments.

Expertise in cloud networking and security architecture.

Strong Scripting and automation skills (Python, PowerShell, Bash).

Experience with Infrastructure as Code.

Knowledge of container (ECS) and Kubernetes security (EKS).

Experience integrating AWS/Azure security controls with SIEM platforms like Microsoft Sentinel.

Take ownership of issues, with a sense of urgency, and using sound judgement to resolve within service levels.

Ability to work independently as well as work well with others in an integrated team environment and must be self-motivated.

Must possess strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self-motivated. Location Washington DC, United States of America