Principal AWS Infrastructure & Security Architect

HCLTech; Chennai District; On-site; INR 4,500,000 - 7,500,000; Full time

Job summary

HCLTech in Chennai seeks a Principal AWS Infrastructure & Security Architect to design secure, scalable cloud solutions for enterprise workloads. You will own architectures, govern IaC, and drive security, compliance, and resilience across migrations and modernization projects.

The role requires hands-on cloud security expertise, automation capabilities, and strong collaboration with cross-functional teams to support governance and operational excellence.

Qualifications

• Strong hands-on experience in AWS architecture and enterprise-scale implementation.
• Deep understanding of the AWS Well-Architected Framework.
• Experience with VPCs, Direct Connect, Transit Gateway, and related networking.

Responsibilities

• Design highly available and secure AWS architectures for enterprise workloads.
• Define, maintain, and govern IaC templates using Terraform and CloudFormation.
• Lead cloud migration, modernization, and disaster recovery strategy.
• Implement and monitor security controls including IAM and encryption.
• Collaborate with cross-functional teams to ensure compliance and resilience.

Skills

AWS architecture

Cloud security

DevSecOps

Automation

Cross-functional collaboration

Education

Bachelor's degree in CS/IT/Engineering

AWS Certified Solutions Architect – Professional

AWS Certified Security – Specialty

Tools

Terraform

AWS CloudFormation

Kubernetes

IAM

OpenSearch

Job description

The Principal AWS Infrastructure & Security Architect will be responsible for designing, implementing, and governing secure, scalable, and resilient AWS cloud solutions for enterprise workloads. The role requires strong architecture ownership, hands-on cloud security expertise, automation capability, and the ability to work with cross-functional teams to support cloud migration, modernization, compliance, and operational resilience objectives.

Key Responsibilities

• Design highly available, scalable, secure, and fault-tolerant enterprise architectures on AWS.
• Architect and implement AWS Landing Zone solutions using AWS Control Tower and AWS Organizations for multi-account governance.
• Define, maintain, and govern Infrastructure as Code templates using Terraform and AWS CloudFormation.
• Support large-scale cloud migration, application modernization, and disaster recovery strategy definition.
• Recommend and configure appropriate AWS compute, storage, database, and networking services including EC2, S3, RDS, VPC, Transit Gateway, and related services.

Cloud Security & Compliance

• Act as a cloud security SME and define security policies, standards, controls, and implementation patterns for AWS environments.
• Design secure network segmentation using AWS WAF, AWS Network Firewall, Firewall Manager, security groups, route tables, and network access controls.
• Implement identity and access management controls using AWS IAM, AWS IAM Identity Center, Active Directory integration, and least-privilege access models.
• Establish encryption controls for data at rest and in transit using AWS KMS, CloudHSM, and certificate management practices.
• Ensure alignment with regulatory and security frameworks such as ISO 27001, SOC 2, GDPR, and internal governance requirements.
• Implement and govern AWS security monitoring services including Security Hub, GuardDuty, Config, CloudTrail, and related detective controls.
• Support vulnerability management, threat modelling, risk assessments, and cloud incident response processes.

DevSecOps, Automation & Operations

• Design and embed DevSecOps controls across CI/CD pipelines, including SAST, DAST, container scanning, and IaC security validation.
• Develop automation and remediation scripts using Python, Bash, or similar scripting languages.
• Implement centralized logging, monitoring, alerting, and observability using Amazon CloudWatch, CloudTrail, OpenSearch, SIEM integrations, and related tooling.
• Drive cloud cost governance and optimization using AWS Cost Explorer, Trusted Advisor, tagging strategy, and usage analysis.
• Work with applications, infrastructure, security, compliance, and operations teams to ensure production readiness and operational stability.

Required Skills & Experience

• Strong hands-on experience in AWS architecture, cloud infrastructure design, cloud security, and enterprise-scale implementation.
• Deep understanding of the AWS Well-Architected Framework, including security, reliability, performance efficiency, operational excellence, and cost optimization pillars.
• Experience with AWS networking concepts including VPC, subnetting, DNS, VPN, Direct Connect, Transit Gateway, VPC peering, routing, and firewall integration.
• Experience with CI/CD platforms, container platforms such as Kubernetes or Amazon EKS, and serverless architecture patterns.
• Strong understanding of security controls, access governance, encryption, vulnerability management, compliance monitoring, and audit readiness.
• Ability to create architecture documentation, solution designs, operational runbooks, standards, and technical governance artefacts.

Qualifications & Certifications

• Bachelor’s degree in computer science, Information Technology, Engineering, or a related discipline.
• AWS Certified Solutions Architect – Professional is strongly preferred.
• AWS Certified Security – Specialty is strongly preferred.
• Additional certifications in cloud security, DevSecOps, networking, or enterprise architecture will be an advantage.
• Strong stakeholder management and communication skills with the ability to present architecture decisions to technical and management audiences.
• Ability to work in a global delivery model and collaborate with infrastructure, application, security, audit, and compliance stakeholders.
• Strong analytical and problem-solving capability with a focus on risk reduction, resilience, automation, and continuous improvement.
• Experience working in regulated environments and supporting internal and external audit requirements.

Expected Outcomes

• Secure, compliant, and well-governed AWS cloud architecture aligned with enterprise standards.
• Improved cloud resilience, availability, disaster recovery readiness, and operational stability.
• Consistent use of automation, IaC, monitoring, and DevSecOps practices across AWS workloads.
• Clear architecture documentation, standards, and governance artefacts to support delivery and operations teams.