Cloud Security Architect – Governance (Mid-Level)

Jobtailor; Belo Horizonte; Presencial; BRL 180 000 - 300 000; Tempo integral

Resumo da oferta

Jobtailor in Belo Horizonte, Brazil, seeks a security engineer to define and evolve security standards for cloud environments and support governance with a security-first mindset. You will assist development teams in adopting secure practices, proactively identify risks, and participate in architecture reviews with a focus on security.

The role requires AWS expertise, IAM policy knowledge, and experience with tools like Terraform, Kubernetes, and CI/CD security gates.

Qualificações

• Completed or ongoing degree in IT, software engineering, or CS.
• Strong AWS experience and governance knowledge.
• Define and review IAM policies following least privilege.
• Familiar with CloudTrail, GuardDuty, Security Hub.
• Experience with VPCs, subnets, NACLs, and RBAC.
• Knowledge of containers, Kubernetes, and DevSecOps practices.

Responsabilidades

• Define and evolve security standards for cloud environments.
• Support change governance with a focus on security.
• Assist development teams in adopting secure practices.
• Proactively identify risks and threats.
• Participate in architecture reviews with security focus.
• Ensure traceability and auditability of changes.
• Contribute to building organizational security maturity.
• Work on projects for a tech consulting firm in cloud and cybersecurity.

Conhecimentos

AWS Governance

IAM Policy Definition

Cloud Security

Risk Management

DevSecOps

Formação académica

Information Technology degree

Ferramentas

Docker

Kubernetes

Terraform

GitHub Actions

Grafana

Prometheus

Descrição da oferta de emprego

• Define and evolve security standards for cloud environments
• Support change governance with a focus on security
• Assist development teams in adopting secure best practices
• Proactively identify risks
• Participate in architecture reviews with a focus on security
• Ensure the traceability and auditability of changes
• Contribute to building organizational security maturity
• Work on projects for a technology consulting firm that provides solutions in innovation, customer experience, ERP, analytics, employee experience, cloud, workplace, and cybersecurity

Requirements

• Completed or ongoing degree in Information Technology, Software Engineering, Computer Science, or a related field
• Strong experience with AWS
• Knowledge of AWS governance and access management
• Define and review IAM policies in accordance with the principle of least privilege
• Structure access models, including roles, groups, federation, and STS
• Environment and account segregation strategies
• Knowledge of CloudTrail, GuardDuty, and Security Hub
• Security event monitoring and correlation
• Knowledge of OWASP, CIS Benchmarks, ISO 27001, and NIST
• Knowledge of AWS WAF and API Gateway
• Networking knowledge, including VPCs, subnets, security groups, and NACLs
• Experience hardening workloads and databases
• Risk management and data classification
• Knowledge of containers and Kubernetes
• RBAC access control
• Container security standards, including image scanning, vulnerability management, and secrets management
• Knowledge of DevSecOps
• SAST, DAST, and dependency scanning
• Security gates in CI/CD pipelines
• Docker and Kubernetes (EKS)
• AWS architecture: EC2, RDS, ECS, S3, Auto Scaling, API Gateway, Load Balancers, Lambda, SNS, and CloudWatch
• Infrastructure as Code using Terraform
• CI/CD with GitHub Actions or similar tools
• Observability with Grafana, Prometheus, and structured logging

Core Competencies

Demonstrates expertise in defining security standards for cloud environments, risk management, and implementing secure best practices. Proficient in AWS governance, IAM policies, and security monitoring tools to enhance organizational security maturity.

Highest-signal resume keywords

• AWS Governance
• IAM Policy Definition
• Cloud Security Standards
• Risk Management
• DevSecOps

ATS Optimization Keywords

Hard Skills

• AWS
• CloudTrail
• GuardDuty
• Security Hub
• OWASP
• CIS Benchmarks
• ISO 27001
• NISTInfrastructure as Code
• SAST

Industry Keywords

• Cybersecurity
• Change Governance
• Security Event Monitoring
• Container Security
• CI/CD Pipelines

Tools & Technologies

• Docker
• Kubernetes
• Terraform
• GitHub Actions
• Grafana
• Prometheus