The posting
abra professional services is seeking a Cyber Architect!
We are looking for an experienced AWS Cloud Security Architect to lead the security and infrastructure architecture of enterprise AWS environments, from Landing Zone design through workload implementation.
The role includes:
- Designing and implementing secure AWS Landing Zones and multi-account environments.
- Defining cloud security architecture, governance, IAM policies, and least-privilege access controls.
- Designing security monitoring and detection solutions using AWS CloudTrail, GuardDuty, Security Hub, Config, and WAF.
- Designing secure network architectures using Transit Gateway, CloudFront, ALB/NLB, API Gateway, PrivateLink, Route 53, and Firewall Manager.
- Performing Threat Modeling and defining security controls for cloud environments.
- Designing secure CI/CD and Infrastructure as Code (IaC) processes.
- Defining and implementing DevSecOps practices and application security controls.
- Evaluating advanced security solutions such as CSPM, CNAPP, CASB, SASE, and ZTNA.
- Creating detailed cloud and security architecture documentation, including HLD and LLD.
Requirements
Education & Qualifications:
- Bachelor’s degree in Computer Science, Software Engineering, Computer Engineering, Electronics Engineering, Exact Sciences, or a related field.
- Alternatively, a relevant academic degree combined with 400+ hours of professional cybersecurity training/certifications.
- Relevant technological military/service background may also be considered, subject to the required qualifications.
Professional Experience:
- At least 4 years of recent experience in AWS Cloud Security and Infrastructure.
- Strong experience with AWS security architecture, including IAM, Control Tower, SCPs, CloudTrail, GuardDuty, Security Hub, Config and WAF.
- Experience designing secure AWS multi-account and network architectures, including Transit Gateway and hybrid connectivity.
- Proven experience in Cloud Threat Modeling and defining security controls.
- Hands-on experience with Infrastructure as Code (CloudFormation) and AWS security services.
- Experience creating HLD and LLD architecture documents



