AWS Cloud Security Architect - Landing Zone & Cyber Resilience

Role: AWS Cloud Security Architect Landing Zone & Cyber Resilience (Remote)

Remote

12+ months

(Alternates depending on seniority/framing: Sr. Cloud Security Engineer IRE/Clean Room, Principal Security Architect AWS Multi-Account, or Cloud Infrastructure Security Architect (EKS + Governance)).




Required Skills:
Multi-account AWS architecture design, AWS Organizations, and landing zone governance
Security Lab foundation and account vending design
Isolated Recovery Environment (IRE) architecture: WORM vault, cross-account backup, recovery orchestration, Clean Room forensic environment
Amazon EKS baseline and lab environment for testing security capabilities




Key Responsibilities
WS-1: AWS Security Agent cloud infrastructure design and implementation support
WS-2 : (Security Lab): Design multi-account lab foundation, centralized logging (CloudTrail, VPC Flow Logs, Config), OU structure, SCPs, and automated account vending
WS-3 (IRE & Clean Room): Design IRE account with WORM vault locking, cross-account/cross-region backup (3-2-1), CMKs, CyberArk break-glass, Macie integration, Network Firewall, Transit Gateway route isolation, and recovery orchestration
WS-5: Design and implement Amazon EKS infrastructure configuration and the security lab environment




Design Backup Audit Manager compliance framework
Design Route 53 DNS isolation and hardened compute baselines
Implement hardened compute baselines and secrets management
Author IRE & Clean Room Architecture & Design Document and Security Lab Architecture Document
Contribute to lab operations guide and account vending admin procedures"ed)"

Thank you & Regards

V S Durga Prasad | Sr. I T Recruiter

E: View email address on us.fitly.work | Desk Ph : View phone number on us.fitly.work

Conch Technologies Inc |