AWS Cloud Security Architect

Shashwath Solution; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Shashwath Solution in Dadri, Uttar Pradesh, India, seeks a hands-on AWS security engineer to implement security services and secure cloud architectures. You will deploy IAM, KMS, WAF, GuardDuty, and network security controls, and collaborate with identity providers for robust authentication and authorization.

Ideal candidate has strong IAM/SCP knowledge, network security experience, and IaC automation skills using Terraform or CloudFormation to ensure secure, scalable deployments.

Qualifications

• Hands-on AWS security experience implementing core security services.
• Strong network security design and firewall knowledge in AWS.
• Expertise in IAM, SCPs and RBAC.
• Experience integrating with Active Directory and Okta.
• Proficiency with IaC tools (Terraform, CloudFormation).

Responsibilities

• Deploy and manage core AWS security services (IAM, KMS, CloudHSM, Organizations, WAF, Network Firewall, GWLB).
• Configure and optimize security features to meet organizational security requirements.
• Design secure VPC architectures with subnets, routing, and firewall configurations.
• Implement RBAC and least privilege principles across identities and services.
• Integrate with identity providers and secure applications focusing on auth/data protection.
• Utilize AWS GuardDuty, CloudTrail for threat detection and incident response.
• Maintain security logging and auditing per internal policies.

Skills

AWS Security

Network Security

IAM SCPs

RBAC/Least Privilege

Education

Bachelor's degree or relevant

Tools

Terraform

CloudFormation

GuardDuty

CloudTrail

GWLB

Job description

Position Overview:

This role is focused on hands‑on implementation of security solutions within AWS environments. It is ideal for individuals with strong practical experience in cloud security, networking, and application security.

Core Responsibilities:

AWS Security Services Implementation:

Deploy and manage core AWS security services like IAM, KMS, CloudHSM, AWS Organizations, Web Application Firewall (WAF), AWS Network Firewall, and Gateway Load Balancer (GWLB) based Security Appliances.

Configure and optimize security features to meet organizational security requirements.

Network Security:

Design and implement secure VPC architectures, including subnets, routing, and firewall configurations.

Hands‑on experience with firewalls, network segmentation, and security group management in AWS.

Identity & Access Management (IAM):

Strong expertise in IAM roles, policies, and AWS Service Control Policies (SCPs).

Implement security best practices for role‑based access control (RBAC) and least privilege principles.

Application Security:

Integrate with identity providers such as Active Directory and Okta.

Secure application architectures, focusing on authentication, authorization, and data protection.

Security Monitoring & Incident Response:

Utilize AWS GuardDuty, CloudTrail, and other monitoring tools for threat detection and incident response.

Implement security logging and audit trails to maintain compliance with internal policies.

Key Requirements:

Hands‑on AWS Security Expertise: Proven experience in implementing and managing AWS security services.

Network Security Knowledge: Strong understanding of subnetting, routing, firewalls, and secure network design in the cloud.

Active Directory Experience: Essential for integrating with enterprise identity systems.

IAM & SCP Expertise: Deep knowledge of AWS IAM, Service Control Policies, and security governance.

Not an InfoSec or Audit Role: This is a technical, hands‑on position focusing on practical security implementation, not compliance audits or theoretical security reviews.

Preferred Skills:

Cloud Security Certifications: AWS Certified Security Specialty, AWS Certified Solutions Architect, or similar.

Application Security Knowledge: Experience with secure application frameworks and identity federation.

Automation & Scripting: Familiarity with infrastructure as code (IaC) tools like Terraform or CloudFormation.