Security Architect - AWS

Responsibilities:

• Serve as the Cloud Security Subject Matter Expert (SME), providing technical leadership on public cloud security architecture and engineering.
• Identify security risks across AWS and GCP environments, design practical mitigation strategies, and drive implementation with engineering teams.
• Design and develop security architecture documentation, reference architectures, and implementation guidelines.
• Partner with Product and Engineering teams to design, review, and validate secure architectures for: Cloud networking, Compute services, Containers, Serverless applications.
• Provide hands-on guidance for Identity & Access Management (IAM), ensuring least-privilege access across cloud environments.
• Review cloud architectures and AI workloads to recommend secure design patterns, identity controls, and data protection measures before deployment.
• Collaborate with cloud providers to evaluate security capabilities and adopt industry best practices.
• Evaluate Cloud Security Posture Management (CSPM), CNAPP, and other cloud security solutions, conducting technical assessments and recommending suitable technologies.
• Mentor junior cloud security engineers through technical guidance, architecture reviews, and knowledge sharing.
• Develop and maintain cloud security standards, configuration guidelines, reference designs, and operational documentation.
• Work with leadership and cross-functional teams to align cloud security initiatives with business objectives.
• Stay current with emerging cloud threats, attack techniques, and evolving cloud security technologies to continuously strengthen the organisation's security posture.

Requirements:

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related technical discipline.
• Equivalent practical experience will also be considered.
• 13+ years of hands-on experience in Cloud Security, Information Security, or Security Architecture.
• Strong expertise in public cloud infrastructure, with the ability to identify and mitigate security risks across hybrid, multi-cloud, and multi-account environments.
• In-depth understanding of information security principles, risk management, governance, and compliance frameworks applicable to large-scale cloud platforms.
• Proven experience designing, implementing, and securing enterprise-scale AWS environments.
• Experience with GCP is highly preferred.
• Hands-on experience leveraging Generative AI (GenAI) and Agentic AI to enhance cloud security operations, threat detection, automation, or security workflows.
• Strong experience integrating security into DevOps and CI/CD pipelines, with the ability to automate security processes across the software development lifecycle.
• Solid understanding of networking fundamentals, including routing, DNS, VPNs, VPCs, network segmentation, and cloud networking concepts.
• Hands-on experience with several of the following technologies: AWS & GCP Cloud Security, Serverless Security, Infrastructure as Code (Terraform, CloudFormation, Ansible), AWS CLI, Azure CLI, Bash, PowerShell, Docker & Kubernetes, VPC/VNet Architecture.
• Cloud-native security services such as AWS GuardDuty, GCP Security Command Centre, Azure Defender for Cloud, and Web Application Firewalls (WAF).
• Source code and CI/CD security, including GitHub Security features.
• Excellent communication and stakeholder management skills, with the ability to present complex technical concepts to both technical and business audiences.
• Strong analytical and problem-solving skills with the ability to manage multiple priorities in a fast-paced, dynamic environment.
• Passion for continuous learning and staying current with emerging cloud security threats, technologies, and industry best practices.