Senior Cloud Security Architect (AWS & Ecosystem) | AWS Security

Jero Technologies; Mumbai; On-site; INR 3,000,000 - 5,400,000; Full time

Job summary

Jero Technologies in Mumbai seeks a Senior Cloud Security Architect to design and govern secure, multi-account AWS environments. You will implement guardrails, CSPM/CNAPP governance, and integrated network security with WAF, GWLB, and advanced firewall solutions.

Role requires 8+ years in cybersecurity with AWS enterprise security experience and relevant certifications. You will drive vulnerability management, EDR integration, and secure DevSecOps practices across cloud workloads.

Qualifications

• 8+ years in cybersecurity with AWS enterprise security experience
• Proven ability to architect security for large-scale AWS environments
• Ability to implement guardrails and governance frameworks across cloud workloads

Responsibilities

• Design multi-account AWS security architectures using Organizations, SCPs, IAM Identity Center, and Security Hub.
• Enforce guardrails with GuardDuty, Inspector, Macie, KMS, CloudTrail, Config, AWS WAF, and Network Firewall.
• Operationalize CSPM/CNAPP tools for posture monitoring, compliance tracking, and drift remediation across AWS workloads.
• Integrate network security with Next-Gen Firewalls via Gateway Load Balancer and manage WAF/DDoS strategies.
• Automate vulnerability management and patch orchestration across EC2 and hybrid workloads.
• Deploy enterprise EDR/AV and stream telemetry to SIEM/XDR platforms.
• Codify security guardrails using IaC and embed security testing in CI/CD pipelines.

Skills

AWS Security Architecture

Multi-account design

GuardDuty/Inspector

WAF & DDoS

IaC (Terraform/CFN)

CI/CD security checks

Vulnerability mgmt

EDR integration

Tools

Wiz

Orca

Prisma Cloud

CrowdStrike

SentinelOne

Qualys

Tenable

Job description

Senior Cloud Security Architect (AWS & Ecosystem) || AWS Security, Cloud Security Architecture

Key Responsibilities

• AWS Native Security: Design multi-account architectures using AWS Organizations, SCPs, IAM Identity Center, and Security Hub.
• Enforce guardrails with GuardDuty, Inspector, Macie, KMS, CloudTrail, Config, AWS WAF, and Network Firewall.
• CSPM & CNAPP Governance: Operationalize enterprise CSPM tools (Wiz, Orca, Prisma Cloud) for continuous posture monitoring, compliance tracking, and drift remediation across AWS workloads.
• Perimeter & Network Security: Integrate virtual Next-Gen Firewalls (Palo Alto VM-Series, FortiGate) via Gateway Load Balancer (GWLB), managing dual-layer WAF/DDoS strategies (AWS WAF, Cloudflare, Akamai).
• Vulnerability Assessment & Patch Management: Automate vulnerability management and patch orchestration across EC2 and hybrid workloads using AWS Systems Manager alongside tools like Qualys, Tenable, or Rapid7.
• Endpoint Protection & SOC Integration: Deploy enterprise EDR/AV solutions (CrowdStrike, SentinelOne) and stream telemetry (VPC Flow Logs, GuardDuty, CloudTrail) to enterprise SIEM/XDR platforms (Splunk, Microsoft Sentinel).
• DevSecOps & Automation: Codify security guardrails using Infrastructure as Code (Terraform, CloudFormation) and embed security testing (Checkov, tfsec) directly into CI/CD pipelines.

Qualifications & Certifications Experience:

• 8+ years in Cybersecurity, with 5+ years specifically architecting security for enterprise-scale AWS environments.
• Certifications (Must have at least one): AWS Certified Security Specialty AWS Certified Solutions Architect Professional Desirable Certifications: CISSP, CCSP, or relevant credentials.