Job Description:
• Design the security architecture for the AWS environment
• Participate in every stage of design and build alongside development and infrastructure teams
• Set and maintain secure baselines for identity and access, networks and firewalls, containers and Kubernetes, storage, encryption, key management, and cryptography
• Design security logging and monitoring across every AWS account and workload
• Review cloud designs and changes and provide practical security guidance
• Build guardrails and automated checks to prevent insecure configurations from reaching production
• Partner with the Application Security Architect to use Wiz to identify and remediate cloud risk from code to runtime
• Write reference architectures and secure development patterns
• Mentor engineers across the company
• Ensure new AWS services are secure from day one
• Maintain the AWS environment against written secure standards and remediate drift
• Demonstrate infrastructure security to customers, auditors, and regulators
Requirements:
• Typically eight or more years of experience in security engineering or architecture
• At least five years focused on hands-on AWS security in multi-account environments
• Expert knowledge of AWS IAM, AWS Organizations, service control policies, and IAM Identity Center
• Expert knowledge of AWS networking, including VPC design, security groups, AWS Network Firewall, and AWS WAF
• Expert knowledge of encryption, including KMS, CloudHSM, and certificate management
• Strong container security experience with Amazon EKS or ECS, including image security, runtime protection, and least-privilege workload identity
• Experience designing security logging with CloudTrail, VPC Flow Logs, GuardDuty, Security Hub, and a central log platform
• Working command of cryptography, including algorithm selection, key rotation, and secrets protection
• Infrastructure as code skills in Terraform or CloudFormation
• Ability to read and write code
• Experience securing a SaaS platform for regulated customers, ideally in financial services
• Ability to explain complex risk in plain language to engineers and executives
• Microsoft Azure or Microsoft 365 security experience is a bonus
• Hands-on experience with Wiz or a similar cloud security platform is a bonus
• AWS Certified Security Specialty certification, or equivalent depth of experience, is a bonus
• Self-starter with strong ownership, learning orientation, drive, ambition, and positive attitude
• Ability to share knowledge and improve the effectiveness of colleagues
Benefits:
• Medical/Rx insurance
• Dental insurance
• Vision insurance
• Disability insurance
• Life/AD&D insurance plans
• Flexible Savings Account (FSA)
• Health Savings Account (HSA)
• Employee Assistance Plan (EAP)
• Health advocacy
• Voluntary ancillary plans: accident, critical illness, hospital indemnity, legal, identity theft, auto/home, and pet insurance
• 401(k) retirement savings plan with company match
• Paid time off