Senior Cloud Security Architect

Job Title: Senior Cloud Security Architect

Location: Washington, DC / Remote.

The successful candidate must demonstrate :

• Deep expertise across primarily AWS and some Azure, networking, identity, security, and Infrastructure as Code

• A history of defining enterprise standards, reference architectures, roadmaps, and governance

• Strong infrastructure engineering credentials prior to moving into architecture

• Experience influencing engineering, security, platform, and executive stakeholders

• Success operating in large, complex, regulated environments

• Exceptional communication and executive presence

Please submit only candidates you would confidently place in front of a CTO, Chief Architect, or Architecture Review Board.

Quality is more important than quantity. I would rather review one exceptional candidate than ten marginal fits.

Minimum Qualifications

· Must possess at least 7 years of IT experience with broad knowledge and an understanding of IT areas such as: Architecture, Infrastructure setup, management, Operating Systems, Database, various types of Applications, Network, and Cloud implementations.

· Must possess at least 5+ years of strong hands-on experience in Cloud infrastructure and applications

· Strong understanding of cloud infrastructure components (server, storage, network, security, data, and applications) to deliver end to end AWS cloud Infrastructure solutions.

· Design and implement secure cloud architectures aligned with security best practices.

· Define cloud security standards, governance frameworks, and security guardrails.

· Lead security architecture reviews for cloud infrastructure and applications.

· Develop and maintain AWS landing zones, multi-account strategies, and security baselines.

· Architect identity and access management solutions using AWS IAM, IAM Identity Center, and least-privilege principles.

· Design and implement network security controls including VPC architecture, segmentation, private connectivity, WAF, and security groups.

· Lead cloud threat modeling, risk assessments, and security reviews.

· Drive cloud security automation using Infrastructure as Code (Terraform, CloudFormation).

· Oversee vulnerability management, cloud posture management, and remediation efforts.

· Mentor junior cloud security engineers and provide technical guidance.

· Support regulatory compliance initiatives (NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA as applicable).

· Partner with development, infrastructure, and security operations teams to implement DevSecOps controls.

· Deep expertise in AWS security services like IAM, Control Tower, Security Hub, Guard Duty, Config, CloudTrail, KMS, Secrets Manager etc.…,

· Strong understanding of Zero Trust and cloud security architecture principles.

· Experience designing secure multi-account AWS environments.

· Expertise in cloud networking and security architecture.

· Strong scripting and automation skills (Python, PowerShell, Bash).

· Experience with Infrastructure as Code.

· Knowledge of container (ECS) and Kubernetes security (EKS).

· Experience integrating AWS/Azure security controls with SIEM platforms like Microsoft Sentinel.

· Take ownership of issues, with a sense of urgency, and using sound judgement to resolve within service levels.

· Ability to work independently as well as work well with others in an integrated team environment and must be self-motivated.

· Must possess strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self-motivated.