Aws Security Architect

JD:

Key Responsibilities

AWS Cloud Security Architecture

• Design, implement, and govern AWS security architecture including, but not limited to:
• AWS Organizations ,Control Tower , Secuirty Hub ,IAM Identity Center (AWS SSO)
• IAM Roles & Policies ,SCPs ,Permission Boundaries ,Resource Policies
• Architect secure multi-account AWS environments using AWS Organizations and Landing Zone best practices.
• Working with customers, Solution Engineers and providing them input on AWS resources architecture, price etc.

Network & Infrastructure Security

Design secure enterprise network architectures across on-premises and AWS, including but not limited to:

• VPC Architecture, Multi-VPC Networking ,Transit Gateway, VPC Peering, PrivateLink ,Direct Connect ,Site-to-Site VPN, Client VPN, Route Tables, Security Groups , Network ACLs, Internet Gateway , NAT Gateway , Route 53
• Load Balancers (ALB/NLB) ,AWS Network Firewall, AWS WAF , AWS Shield Advanced

Design secure hybrid connectivity between enterprise data centers and AWS while implementing Zero Trust principles and network segmentation.

Identity & Access Management

• Design enterprise IAM strategy ,Federation with Active Directory, LDAP and SAML
• MFA implementation ,Cross-account IAM roles ,Temporary credential management ,IAM Access Analyzer ,IAM policy optimization ,Privileged Access Management integration

Security Monitoring & Threat Detection

Implement and manage cloud security monitoring solutions including but not limited to:

• AWS Security Hub, GuardDuty, Inspector, Macie , Detective, AWS Config, CloudTrail , VPC Flow Logs, CloudWatch ,Security Incident Response, Threat Hunting , Vulnerability Management

Data Protection & Encryption

Design enterprise encryption strategy including:

• AWS KMS ,CloudHSM ,Secrets Manager ,Systems Manager Parameter Store ,SSL/TLS Certificate Management ,ACM ,Encryption at Rest ,Encryption in Transit ,Key Rotation Policies

Compliance & Governance

Implement cloud governance aligned with:

• CIS AWS Foundations Benchmark
• ISO 27001
• NIST Cybersecurity Framework
• PCI DSS
• SOC 2
• RBI / Government Security Guidelines (preferred)

Develop security baselines, standards, architecture documentation, risk assessments, and audit evidence.

Security Automation & DevSecOps

• Automate security controls using:
• Terraform , CloudFormation, Ansible , Python , Bash
• Implement Infrastructure as Code (IaC) security validation.
• Integrate security into CI/CD pipelines.
• Enable automated compliance and drift detection.

Incident Response & Security Operations

• Lead critical security incidents and forensic investigations.
• Perform Root Cause Analysis (RCA) and recommend preventive controls.
• Develop security runbooks and incident response procedures.
• Coordinate with SOC, Infrastructure, Network, Application, and Customer teams during security incidents.

Leadership & Stakeholder Management

• Act as the AWS Security Subject Matter Expert (SME).
• Mentor L1/L2 engineers and review technical designs.
• Participate in customer security reviews, audits, and architecture discussions.
• Drive security awareness and best practices across engineering teams.
• Create Documentation and SOPs

Preferred Skills

• Kubernetes / Amazon EKS Security
• Docker & Container Security
• SIEM/SOAR platforms (Microsoft Sentinel, Splunk, QRadar, ELK)
• Palo Alto, Fortinet, Check Point, Cisco Firepower
• Zero Trust Architecture
• CNAPP/CSPM/CWPP solutions
• MITRE ATT&CK Framework
• Threat Modeling

Experience & Qualifications

• 12+ years of experience in Infrastructure, Network, Cloud, or Information Security.
• Minimum 8+ years of hands-on AWS Security experience.
• Experience designing secure hybrid cloud environments.
• Strong understanding of enterprise networking and security architecture.
• Experience in 247 production support environments.

Preferred Certifications

• AWS Certified Security – Specialty
• AWS Solutions Architect – Professional
• AWS Advanced Networking – Specialty
• CISSP ,CCSP ,CISM ,CEH (Good to Have)
• Palo Alto PCNSE / Fortinet NSE / Cisco Security Certifications (Preferred)

Work Location : Greater Noida