Cloud Architect – Security & Guardrails (AWS/Azure) (She/ He/ They)

• →

• Design, implement, and enforce security baselines and preventative guardrails across AWS and Azure environments.
• Develop governance frameworks leveraging:
  • AWS Organizations
  • Service Control Policies (SCPs)
  • AWS Control Tower
  • Azure Policy
  • Azure Landing Zones
• Ensure alignment with internal security standards, regulatory requirements, and industry best practices.

• Design and optimize multi-cloud logging and monitoring strategies.
• Build scalable telemetry pipelines integrating:
  • AWS CloudTrail
  • Amazon GuardDuty
  • Azure Activity Logs
  • Microsoft Defender for Cloud
• Enable centralized visibility through enterprise SIEM platforms such as:
  • Microsoft Sentinel
  • Splunk
• Support real-time threat detection, correlation, investigation, and alerting capabilities.

• Define architecture and deployment strategies for:
  • EDR/XDR solutions
  • Cloud Workload Protection Platforms (CWPP)
• Secure virtual machines, containers, Kubernetes environments, and serverless workloads across cloud platforms.
• Collaborate with Security Operations teams to enhance threat detection and response.

• Implement and optimize Cloud Security Posture Management (CSPM) capabilities.
• Establish enterprise vulnerability management processes across cloud assets.
• Enable continuous security scanning for:
  • Cloud misconfigurations
  • Infrastructure vulnerabilities
  • Container images
  • Operating systems
• Develop automated remediation workflows and security playbooks.

• Design and enforce Zero-Trust security principles.
• Strengthen Identity and Access Management (IAM) governance across cloud platforms.
• Implement:
  • Just-In-Time (JIT) access
  • Privileged Access Management (PAM)
  • Role-Based Access Control (RBAC)
  • Federated identity solutions
• Partner with security stakeholders to reduce privileged access risks.

• Evaluate, deploy, and govern best-in-class cloud security technologies.
• Integrate third-party security platforms including:
  • CyberArk
  • Wiz
  • Palo Alto Prisma Cloud
  • CrowdStrike
  • Other strategic security tooling
• Drive consistent security controls and operational excellence across the cloud ecosystem.

• Extensive experience designing and securing enterprise-scale AWS and Azure environments.Deep knowledge of cloud-native security services, controls, and governance frameworks.Hands-on expertise with:

  • SIEM platforms
  • EDR/XDR technologies
  • Vulnerability management solutions
  • CSPM tools

  Strong experience implementing:

  • Azure Policy
  • AWS Control Tower
  • Service Control Policies (SCPs)
  • Cloud governance frameworks

  Advanced Infrastructure as Code (IaC) skills, particularly with Terraform.Experience embedding security controls into CI/CD and cloud deployment pipelines.Strong understanding of:

  • Modern cyber threats
  • MITRE ATT&CK framework
  • Cloud attack vectors
  • Security monitoring and incident response processes

  Proven ability to collaborate effectively with:

  • Cloud Engineering teams
  • Security Operations Centers (SOC)
  • Risk, Compliance, and Audit functions

  Excellent stakeholder management and communication skills.
  
  
  

1. HR Interview with the recruiter
2. Technical Interview
3. Client Interview 
4. Feedback and offer

#LI-HYBRID