Identity Security Architect
Openkyber
Application Security Architect AWS Role: Certified - Application Security Engineer (AWS)
Location: Remote
Role Summary
Location: Remote
Role Summary
We are seeking an experienced Application Security Engineer to secure applications built and operated on AWS. You will embed security across the SDLC - from secure design and code review through CI/CD integration, runtime protection, and incident response - working closely with development, DevOps, and client security teams.
Key Responsibilities- Perform threat modeling and secure design reviews for applications and microservices deployed on AWS (EC2, ECS/EKS, Lambda, API Gateway).
- Integrate and operate security tooling in CI/CD pipelines: SAST, DAST, SCA/dependency scanning, container image scanning, and IaC scanning.
- Configure and manage AWS-native security services: WAF, Shield, GuardDuty, Inspector, Security Hub, KMS, Secrets Manager, IAM.
- Define and enforce least-privilege IAM policies, secrets management standards, and encryption (at rest/in transit) across workloads.
- Conduct secure code reviews and vulnerability triage; partner with dev teams on remediation and secure coding practices (OWASP Top 10, CWE).
- Harden infrastructure-as-code (Terraform/CloudFormation) using policy-as-code (OPA, Checkov) and guardrails (SCPs, Config rules).
- Support penetration test coordination, findings remediation, and audit/compliance requirements (SOC 2, ISO 27001, PCI-DSS as applicable).
- Respond to application-layer security incidents; contribute to detection rules and runbooks.
- Mentor engineers and champion DevSecOps culture across delivery teams.
- 8+ years in application security / product security, with 3+ years securing workloads on AWS.
- Hands-on expertise with AWS security services: IAM, WAF, GuardDuty, Inspector, Security Hub, KMS, Secrets Manager, CloudTrail.
- Strong knowledge of OWASP Top 10, API security, authentication/authorization patterns (OAuth 2.0, OIDC, SAML).
- Experience with security tooling: SonarQube/Checkmarx/Veracode (SAST), Snyk/Prisma/Aqua (SCA & containers), Burp Suite/OWASP ZAP (DAST).
- Proficiency in at least one language for automation - Python, Go, or similar; ability to read Java/Node.js/.NET application code.
- Experience securing containerized (Docker, EKS/ECS) and serverless (Lambda) architectures.
- IaC security: Terraform or CloudFormation with Checkov/tfsec/cfn-nag.
- CI/CD security integration: GitHub Actions, GitLab CI, Jenkins, or AWS CodePipeline.
- Certifications: AWS Certified Security Specialty (strongly preferred); CSSLP, OSWE, or CISSP.
- Experience with CNAPP platforms (Wiz, Prisma Cloud, CrowdStrike Falcon Cloud).
- Threat modeling frameworks (STRIDE, PASTA) and secure SDLC program experience.
- Prior work in a client-facing or consulting/delivery environment with enterprise customers.
- Exposure to compliance frameworks: SOC 2, ISO 27001, PCI-DSS, HIPAA, FedRAMP.
- Strong communication - able to explain risk and remediation to both engineers and business stakeholders.
- Pragmatic, risk-based mindset; balances security rigor with delivery velocity.
- Self-driven; comfortable operating in ambiguous, fast-moving programs.
For applications and inquiries, contact:View email address on us.fitly.work
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Identity Security Architect in Atlanta, GA vacancy
- ...Contract to hire, no 3rd parties please We are looking for a Security Architect to help shape and scale security across our products, cloud... ...for every decision. Provide architectural guidance for identity, authentication, authorization, secrets management, encryption...SuggestedContract work
- ...Key Responsibilities & Skills: Azure Security Architecture Design Security Compliance Design & Implementation Threat Modeling... ..., Palo Alto) Cloud Security Assessment & Reporting Identity & Access Management (IAM) Strategy Data Protection &...Suggested
- ...RESPONSIBILITIES: OpenKyber has a client that is seeking a Security Architect in Tampa, FL. Summary: We are seeking an experienced Enterprise... ...-malware, SIEM, and security monitoring technologies Identity and Access Management (IAM) concepts and technologies...SuggestedHourly payContract work
- ...Proficiency in Python scripting, custom security tool development, and REST API integrations... ...YAML, and vendor SDKs. Experience with Identity and Access Management (IAM), role-based... ...communication skills. Responsibilities Architect, develop, and maintain custom Python-based...Suggested
- ...position is only for W2 candidates Job Details Role: Security Architect Work Arrangement: Fully Remote Schedule: 40... ...a fully remote opportunity focused on security automation, identity and access management, Linux platforms, and enterprise cybersecurity...SuggestedImmediate startRemote work
- ...Role: Security Architect Location: Columbia, SC (Remote) Duration: 12+ months Scope of the project: This position will serve as a contract... ...supporting security automation, custom tool development, identity and access management, Linux systems and a broad range of enterprise...Contract workFor contractorsWork experience placementRemote work
- ...Job Title: Network Security Architect Location: NYC, NY (Hybrid- 3 days a week) Job Type: Contract/Fulltime IP : Virtusa Rate : Depends Upon... ...Access Control & Data ProtectionDefine and implement secure identity federation, Multi-Factor Authentication (MFA), Single Sign-...Full timeContract workLocal area3 days per week
- ...Role: Senior Business Analyst - Security & IAM Role Summary We are seeking a highly motivated... ...and operational initiatives across Identity and Access Management (IAM),... ...candidate will collaborate with security architects, engineering teams, business stakeholders...
- ...Job Title: Sr Network Security Engineer Location: Los Angeles, CA Duration: 6 Months Plus Description: Seeking a highly qualified Network... ...monitoring platforms, including Cisco Catalyst Center, Cisco Identity Services Engine (ISE), Thousand Eyes, and Spectrum Perform...For contractors
- ...A major enterprise organization is seeking a Cybersecurity Engineer focused on Directory Services and Identity Security for a long-term contract engagement. This role supports critical identity infrastructure across hybrid environments, leveraging technologies such as...Long term contractContract work
$120 - $140 per hour
...Principal Security Architect (Security Operations & Engineering) Irvine, CA (Remote) Contract JPC - 20600 Solugenix is seeking a Principal... ...Lead detection engineering initiatives for endpoint, network, identity, cloud, and behavioral analytics. Design AI-powered and...Contract workRemote work- ...Job Description We are seeking a highly skilled Identity, Authentication and Authorization Architect (IAA) with deep expertise in various security products, authentication, authorization, access management, governance, controls, regulatory requirements and agentic identities...Work experience placement
- ...Role Description Design Identity-centric Workforce Security solutions for secure authentication, authorization, and access management. Develop identity... ...Access Passwordless Authentication Identity Federation Architect solutions for: Entra ID Azure AWS Microsoft 365 Okta...
$110 - $150 per hour
...Infosec Solutions Architect (Managed Security Services) Irvine, CA (Remote) Contract JPC - 20753 OpenKyber is seeking an experienced Infosec... ...Define detection use cases for endpoint, network, cloud, identity, and behavioral analytics. Develop AI-enabled security automation...Contract workRemote work- ...We are hiring a Security Architect - Consultant to help build custom tools, streamline SOC workflows, and manage security platforms.... ...Management, and Incident Response workflow automation. Identity & Security Platforms: Expertise in IAM (provisioning, RBAC),...Remote work
- ...Job Role: Google Gemini Enterprise Security Architect Location: Remote with Travel Hire-Type: Contract Job Description:... ...injection protection) Agent Gateway policy design SSO / Identity Management Multi-tenant architecture for sensitive data...Contract workRemote work
- ...Google Cloud Platform AI Architect (Diamond Layer Tech Lead)* Location - NJ/ATL (Hybrid)... ...Google Cloud Platform/GKE and integrate them securely with BigQuery, GCS, and semantic... ...observability platforms and Grafana. Implement identity-aware retrieval, least-privilege data...
- ...Project/Position Title: IT Security Specialist (Identity & Access Management & Migration Consultant) Work Location: Remote Contract Term: 7/31/2027 Minimum Mandatory Requirements ~5+ years of IAM implementation and migration experience ~ Hands-...Contract workRemote work
- ...authentication services from ForgeRock OpenAM to PingOne Advanced Identity Cloud and Microsoft Entra ID while minimizing business... ...IAM, SSO, OAuth 2.0, OIDC, SAML, authentication architecture, security best practices. Preferred Qualifications- mandatory Government...
- ...We are seeking a hands-on, senior-level Security Engineer/Architect Consultant to join the Division of Information Security (DIS) at the South... ...Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold). Identity & Access Management (IAM): Manage user provisioning/deprovisioning...Contract workWork experience placementLocal areaRemote workShift work
- ...Security Engineer / Architect Identity, Authorization & Platform Security Location: Denver, CO 100% Onsite Job Type: Contract Duration: Contract / Long-Term Engagement Position Overview We are seeking a hands-on Security Engineer / Architect to design, build, and implement...Contract work
- ...Title : Cloud Security Architect - Location : Raleigh, NC - Hybrid Duration : 12 + Months Job Type : C Description : Supplemental Staffing... ...Design and maintain secure Azure architectures across identity, networking, data protection, logging/monitoring, and governance...Local area
- ...Role: Microsoft Office 365 Security Consultant Location: Milpitas, CA or Ann Arbor, MI (... ...& SME Role Serve as the primary SME and architect for Microsoft Office 365 security across... ...optimize: Conditional Access policies, Identity Protection, Tenant restrictions, External...Work at office
- ...Description: The Software Developer III will manage the enterprise Identity and Access Management (IAM) ecosystem throughout the contract.... ..., and Privileged Access Services, and collaborating with security and IT teams to maintain consistent IAM practices. Regularly assess...Contract work
- ...direct client We are looking for S ecurity Architect - Consultant (Min 8+yrs Exp) REMOTE (... ...Webcam or In Person Interview looking for a Security Architect Consultant Work Location:... ...TICKETING, CASE MANAGEMENT, NOTIFICATION, IDENTITY, DATA SOURCES, APIS, SDKS AND OTHER...For contractorsImmediate startRemote work
- ...W2 / 1099 Contract | Physical Security Systems Integration Architect PACS, APIs & OT Security | Columbus, OH (Hybrid) Physical Security Systems... ...Control Systems (PACS) , enterprise API integrations, identity/HR system integration, OT/industrial networking, cloud/...Contract workRemote workRelocation
- ...IT Security Specialist (Identity & Access Management & Migration Consultant) Remote 12-month Contract Job Description: We are seeking an experienced IT Security Specialist with deep expertise in Identity & Access Management (IAM) to lead the migration of enterprise authentication...Contract workRemote work
- ...Role: Cyber Security Architect - Agentic Identity & Access Management Location: Dallas, TX Hybrid Job Summary: We are seeking an experienced Cybersecurity Architect to design integrated authorization architecture and governance model for AI applications and agents...Work experience placement
- ...Security NLP Architect Remote Type: 12 Month Contract Hourly ~12+ years of progressive expertise in Enterprise AI Architecture, NLP, Distributed Computing, or complex ML Systems. ~5+ years of dedicated, hands-on experience architecting production-level Generative...Hourly payContract workRemote work
- ...JOB DESCRIPTION : 15+ years of experience in Application Security, Product Security, or DevSecOps, including 3+ years securing AWS-based applications. Strong expertise in securing applications throughout the Secure Software Development Lifecycle (SSDLC). Perform threat...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Identity Security Architect. Be the first to apply!
Related searches

