Aws Architect

AWS Security Architect

Contract -1 Year

Remote

Shift -CST / PST

Apply [email removed]

Okay to use own laptop

Strong experience designing secure enterprise AWS architectures using Zero Trust, defense-in-depth, and threat modeling.

• Deep expertise in IAM policies, roles, federation, Identity Center, STS, MFA, permission boundaries, and least privilege.
• Experience with AWS Organizations, OUs, SCPs, Control Tower, delegated administration, account isolation, and governance guardrails.
• Strong knowledge of VPC, subnet segmentation, SG/NACL, Transit Gateway, PrivateLink, VPC endpoints, Network Firewall, WAF, and Shield.
• Expertise in KMS, key policies, encryption, Secrets Manager, ACM, S3 security, Macie, and data classification.
• Hands-on experience with CloudTrail, GuardDuty, Security Hub, Config, Detective, Security Lake, CloudWatch, and centralized logging.
• Experience handling security incidents, investigation, containment, automated remediation, forensics, isolation, and response playbooks.
• Knowledge of SAST/DAST, dependency scanning, container security, CI/CD security, secrets scanning, and IaC security.
• Experience supporting PCI DSS, HIPAA, SOC 2, ISO 27001, risk assessments, control mapping, and compliance evidence.