Associate Director (Cloud Security Architect)

Requirements

• Experience : 13+ years
• Extensive experience in AWS cloud security engineering, cloud security architecture, and securing large-scale production AWS environments.
• Expert knowledge of AWS Organizations, multi-account architectures, landing zones, and Service Control Policies (SCPs).
• Strong expertise in AWS IAM, least-privilege access, role-based access controls, identity federation, and privilege management.
• Hands-on experience designing and implementing AWS cloud security controls, including VPC security, network segmentation, private connectivity, and workload isolation.
• Strong experience securing Amazon EKS, Kubernetes clusters, containers, and cloud-native workloads.
• Proven expertise in Terraform and Infrastructure-as-Code (IaC) security, including policy enforcement, automated guardrails, and secure infrastructure provisioning.
• Strong understanding of Policy-as-Code practices and integrating security checks into CI/CD pipelines and DevSecOps workflows.
• Experience with AWS data protection capabilities, including encryption, AWS KMS, secrets management, key lifecycle management, and credential rotation.
• Knowledge of AWS-native security services for cloud security posture management, threat detection, logging, monitoring, and security incident investigation.
• Experience identifying and remediating cloud security misconfigurations, vulnerabilities, excessive permissions, and high-risk exposures.
• Understanding of cloud resilience, disaster recovery architecture, and security requirements for business-critical workloads.
• Experience supporting security audits, compliance assessments, risk remediation, and client security assurance activities.
• Ability to develop reusable security reference architectures, technical standards, remediation roadmaps, and measurable security controls.
• Strong technical leadership, analytical, troubleshooting, and cross-functional collaboration skills.
• Excellent communication skills, with the ability to work effectively with cloud engineering, DevOps, platform engineering, enterprise security, and compliance stakeholders.

Responsibilities

• Design, implement, and maintain AWS cloud security architecture across large-scale production environments, ensuring secure, scalable, and compliant cloud operations.
• Define and maintain secure multi-account AWS environments, including landing zones, AWS Organizations, and Service Control Policies (SCPs).
• Implement least-privilege access controls using AWS Identity and Access Management (IAM), supporting effective cloud identity and privilege management.
• Design and enforce secure VPC networking, network segmentation, ingress and egress controls, private connectivity, and workload isolation.