Cloud Security Architect - AWS & Data Platforms

Job Description

We are looking for a hands-on Cloud Security Architect to strengthen security across enterprise cloud and data platforms.

The role focuses on security architecture, identity and access management (IAM), vulnerability management, DevSecOps, and compliance. You will turn enterprise security requirements into practical, automated controls across AWS, Snowflake, GitHub, and supporting services, working closely with platform engineering and central Security/IAM teams.

_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._

• Design and review secure AWS and data-platform architectures, including network segmentation, encryption, secrets management, logging, and workload isolation
• Perform threat modeling, security design reviews, and technical risk assessments; define reusable security patterns and guardrails
• Align solutions with enterprise security policies, ISO 27001, GDPR, and applicable pharmaceutical/GxP requirements
• Support audits, security control assessments, evidence collection, and risk remediation
• Design IAM for AWS, Snowflake, GitHub, and service integrations using least privilege, RBAC/ABAC, SSO, SAML, and OIDC
• Improve role models, privileged access, service identities, authentication, authorization, and secrets management; review and remediate excessive permissions and access misconfigurations
• Collaborate with central IAM on identity lifecycle, access reviews, provisioning/deprovisioning, and integrations with tools such as SailPoint IdentityNow
• Define and improve vulnerability discovery, risk-based prioritization, remediation tracking, and escalation processes; assess cloud misconfigurations, container images, infrastructure components, and third-party dependencies
• Leverage AWS Security Hub, GuardDuty, Config, CloudTrail, IAM Access Analyzer, and CSPM tools to improve visibility and controls; support security incident investigations and follow-up preventive measures
• Embed security into infrastructure-as-code and CI/CD workflows using AWS CDK and GitHub Actions, including SAST, SCA, IaC and container scanning, and DAST where relevant
• Secure CI/CD identities, OIDC-based access, deployment permissions, secrets, and supply-chain controls; automate security checks, compliance evidence, reporting, and repeatable remediation
• Design secure Snowflake access models, including roles, row-level security, masking, and sensitive-data protection; contribute security requirements to monitoring, incident response, backup, and disaster recovery designs

Requirements

• Degree in Computer Science, Cybersecurity, or a related field, or equivalent experience
• 7+ years of practical experience in AWS cloud security architecture and core security services
• Deep knowledge of IAM, identity federation, least-privilege design, and access governance
• Background in vulnerability management, cloud security posture, threat modeling, and risk-based remediation
• Hands-on expertise in IaC (AWS CDK, Terraform, or CloudFormation) and CI/CD security, preferably GitHub Actions
• Understanding of containers/Kubernetes, networking, and encryption, along with cloud security monitoring
• Familiarity with ISO 27001, NIST, and GDPR, as well as enterprise security governance
• Capability to translate security policies into engineering solutions and collaborate effectively across teams
• English proficiency at an Upper-Intermediate level (B2) or higher

Nice to have

• Experience with Snowflake security, data-access governance, and row-level security
• Proficiency in SailPoint IdentityNow or similar identity governance platforms
• Familiarity with security tooling such as Wiz, Prisma Cloud, and Snyk, as well as Trivy or Checkov
• Background in pharma, healthcare, or another regulated industry, including knowledge of GxP/GAMP 5
• Certifications such as AWS Security Specialty, CISSP, CCSP, or CISM

Company offers

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
• Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more