Cloud Security Architect

We are seeking an experienced Cloud Security Architect to design, implement, and govern Identity and Access Management (IAM) controls across a large-scale AWS multi-account environment.

Key Responsibilities

• Design, implement, and maintain AWS IAM policies, roles, permission boundaries, and cross-account access controls.
• Enforce least-privilege access across AWS accounts and cloud resources.
• Secure privileged and non-privileged identities through effective access management and governance practices.
• Implement and manage Privileged Access Management (PAM) controls and identity governance processes.
• Develop and maintain cloud security standards, policies, and governance frameworks.
• Identify and remediate IAM misconfigurations, excessive permissions, and access-related security risks.
• Automate security controls, compliance checks, and access reviews using scripting and cloud-native tools.
• Monitor cloud security posture and support continuous compliance with enterprise security policies.
• Collaborate with cloud engineering, cybersecurity, infrastructure, and compliance teams to implement security best practices.
• Support security audits, risk assessments, and regulatory compliance initiatives.

Required Skills and Experience

1. AWS Identity and Access Management (IAM)

• Strong hands-on experience with AWS IAM policies, roles, trust relationships, and permission boundaries.
• Experience managing IAM across large-scale AWS multi-account environments.
• Understanding of cross-account access, federation, SSO, and least-privilege principles.
• Experience identifying and remediating excessive permissions and IAM security risks.

2. Cloud Security Architecture and Governance

• Strong understanding of AWS security architecture and cloud security best practices.
• Experience implementing cloud security controls, governance policies, and access management standards.
• Knowledge of privileged and non-privileged identity security.
• Understanding of cloud security posture management and identity governance concepts.

3. Security Compliance and Automation

• Experience implementing automated security controls and compliance checks.
• Knowledge of cloud security frameworks and standards, such as NIST and CIS benchmarks.
• Ability to automate security tasks using scripting or cloud-native tools.
• Experience supporting security audits, compliance assessments, and remediation activities.

4. Privileged Access Management (PAM)

• Knowledge of PAM solutions, privileged account controls, and secure credential management.
• Understanding of identity lifecycle management, access reviews, and governance processes.