{"id":2767286,"url":"https://alion.io/job/ltm-aws-cloud-security-architect-senior-specialist-architecture","title":"AWS Cloud Security Architect (Senior Specialist - Architecture)","company":{"id":9353,"name":"LTM","domain":"ltm.com","url":"https://alion.io/company/ltm","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"RippleHire","truth_index":{"grade":"B","score":77,"open_postings":172,"ghost_share":0,"stale_share":0.936,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Jersey City, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":125000,"max_usd":249000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":414},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon Kinesis","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"DynamoDB","optional":false},{"name":"IAM","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-09-03T00:00:00Z","employer_posted_date":"2026-10-17","last_verified_at":"2026-10-25T14:39:13Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"Title: AWS Cloud Security Architect\nLocation: Remote\nCloud Security Engineer - SRC (Partner)\nDescription: Hands-on policy authoring and implementation resources responsible for designing and writing Service Control Policies (SCPs), Resource Control Policies (RCPs) and data perimeter policy rule sets. Work under the direction of the AWS Lead Security Consultant. Responsible for Terraform-compatible policy code delivery, testing in non-production environments, and blast radius analysis. Resources are required to cover the volume of work (47 SCPs + 11 RCPs + data perimeter) within the engagement timeline.\nActivities:\n·Author SCP policy rule sets for all 47 enabled AWS services, prioritized by SCI tier\n·Author RCP policy rule sets for the 11 eligible services (S3, KMS, CloudWatch Logs, DynamoDB, EC2 Autoscaling, Inspector, Kinesis, SQS, CodeBuild, CodePipeline, Secrets Manager)\n··Implement VPC endpoint policies and resource-based policies for critical assets (logging buckets, KMS keys)\n··Deliver all policy artifacts as Terraform-compatible code for deployment via Control Tower AFT pipelines (new landing zone) and hybrid Terraform/manual deployment (legacy landing zone)\n·Validate policy syntax and functionality in sandbox/non-production environments\n·Conduct blast radius analysis documenting potential impact of each policy on existing workloads\n·Develop phased rollout plans (Account/OU level to root) for each policy batch\n·Identify and document Control Tower default SCP overlaps with custom policies\n··Develop operational runbooks for ongoing policy management and exception handling\n··Conduct knowledge transfer sessions with Customers Platform Engineering Team and Cloud Engineering teams\nSkills Required:\n·AWS Certified Security - Specialty (required)\n·Hands-on experience authoring SCPs, RCPs, and data perimeter controls (VPC endpoint policies, resource-based policies)\n·Strong Terraform/Infrastructure-as-Code skills, including experience with AWS Control Tower AFT\n·Deep knowledge of IAM policy language, condition keys, and service-specific policy capabilities\n·Experience with phased deployment of organizational policies in multi-account AWS environments\n·Understanding of blast radius analysis and rollback methodologies for policy changes\n··Familiarity with NIST and financial services compliance requirements\nExperience working across both Control Tower and legacy (non-CT) AWS landing zones","description_format":"text","description_chars":2441,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Media & Entertainment","Creative Agencies","Branding"],"lifecycle":[{"event":"open","at":"2026-10-17T04:30:42Z"}],"visa":[],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.494,"p_room":0.44,"age_days":52,"expected_fill_days":41,"reasons":["conf:2","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/ltm-aws-cloud-security-architect-senior-specialist-architecture","json_url":"https://alion.io/job/ltm-aws-cloud-security-architect-senior-specialist-architecture.json","meta":{"generated_at":"2026-10-25T15:48:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22836,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9353},"rest":"https://alion.io/mcp/rest/get_company?id=9353"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fltm-aws-cloud-security-architect-senior-specialist-architecture"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fltm-aws-cloud-security-architect-senior-specialist-architecture"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fltm-aws-cloud-security-architect-senior-specialist-architecture"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ltm-aws-cloud-security-architect-senior-specialist-architecture\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fltm-aws-cloud-security-architect-senior-specialist-architecture"}]}