AWS-02 · CCoE Cloud Architect — Architecture & Security
Senior cloud architect acting as the architecture and security authority in a major automotive client's Cloud Center of Excellence, part of a Megazone team delivering managed multicloud (AWS, Azure, GCP) across ~155 accounts. Day to day: set landing-zone and security standards, review and approve business-unit designs, drive compliance posture. Onsite in Irvine, CA with regular Korea-hours calls.
- Compensation
- $160K–$190K / yr
- Location
- Irvine, CA
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Architecture
- Posted
Skills
Must have
- 7+ years in cloud infrastructure, including 4+ years designing on AWS at enterprise scale (multi-account, multi-VPC)
- Demonstrable ownership of an AWS multi-account landing zone (Control Tower or equivalent custom build) including guardrails and account vending
- Deep AWS security: IAM policy design, SCPs, KMS, VPC security architecture, centralized logging and AWS security services
- Track record of governing other teams' designs: architecture review, standards enforcement, constructive pushback
- Professional working fluency in Korean and English
- Able to work onsite in Irvine, CA
- Authorized to work in the US
- Able to pass client background screening and work within SOC 2 control environment
Nice to have
- AWS Solutions Architect Professional or Security Specialty certification
- MSP or consultancy background
- Automotive, manufacturing or Korean-affiliated enterprise experience
- SOC 2 / ISO 27001 / NIST control mapping experience
- Working knowledge of Azure and Google Cloud security
Full description
The role
Megazone US is an AWS Premier Tier Services Partner and part of MegazoneCloud, headquartered in Seoul. This seat joins a dedicated 22-person team delivering a multicloud managed service — AWS, Azure and Google Cloud across roughly 155 cloud accounts — to a major automotive enterprise client and its business units. You are the architecture and security authority inside the client’s Cloud Center of Excellence: you set the standard for how AWS accounts are built and secured, you review what the business units want to deploy, and you are the person who decides whether a design is safe to run.
What you will do
- Own landing-zone and account architecture standards — account structure, organizational units, networking, identity, logging and guardrails.
- Review business-unit architectures and change requests, and approve, reject or improve them against the standard.
- Own security architecture: IAM and least privilege, encryption, boundary protection, secrets handling and the security baseline every account is measured against.
- Drive vulnerability and compliance posture across the estate (Security Hub, GuardDuty, Config, Inspector) and push remediation through the operations team.
- Produce the reference patterns and documentation that platform and operations engineers build from.
- Act as senior technical escalation for architecture and security incidents.
- Explain architecture and risk decisions to Korean-speaking client and HQ stakeholders, in writing and in meetings.
What we need — must have
- 7+ years in cloud infrastructure, including 4+ years designing on AWS at enterprise scale (multi-account, multi-VPC).
- Demonstrable ownership of an AWS multi-account landing zone — Control Tower or an equivalent custom build — including guardrails and account vending.
- Deep AWS security: IAM policy design, SCPs, KMS, VPC security architecture, centralized logging and the AWS security services.
- Track record of governing other teams’ designs: architecture review, standards enforcement, saying no constructively.
- Professional working fluency in Korean and English.
- Able to work onsite in Irvine, CA.
Nice to have
AWS Solutions Architect Professional or Security Specialty · MSP or consultancy background · Automotive, manufacturing or Korean-affiliated enterprise experience · SOC 2 / ISO 27001 / NIST control mapping · Working knowledge of Azure and Google Cloud security
Working pattern — please read before applying
- Core hours are standard US Pacific business hours, onsite in Irvine.