AWS Cloud Security Architect

Caixa Mágica Software; Lisboa; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Permanent contract

Health and Life Insurance

Tech equipment

SIM Card & personal smartphone

Team events

Training & growth opportunities

Job summary

Caixa Mágica Software is seeking an experienced AWS Cloud Security Architect to support a major aviation client. You will help establish a platform-oriented security engineering team focused on security as code within DevOps and platform practices.

You will define reference architectures, landing zones, and policy-driven controls, while developing reusable security frameworks and tooling for the cloud platform. The role requires strong AWS security experience and hands-on coding skills.

Qualifications

• Experience in AWS security architecture and engineering.
• Hands-on development experience with Python.
• Infrastructure-as-Code with Terraform and secure pipelines.

Responsibilities

• Define and implement security reference architectures (IAM, logging, detection, vulnerability management).
• Design and build secure cloud landing zone patterns.
• Translate policy and regulatory requirements into technical controls.

Skills

AWS security architecture

Python development

Automation/IaC

Multi-account AWS

Cloud platforms experience

English fluency

Tools

Terraform

Job description

Overview:

We are looking for an experienced AWS Cloud Security Architect to support an ongoing engagement with a major client in the Aviation industry. The team is building a cloud-native cybersecurity capability aligned to a modern AWS-first technology estate. The objective is to establish a platform-oriented security engineering team that designs, builds, and operates security as code, embedded within DevOps and platform engineering practices

What will you do?

• Define and implement security reference architectures (IAM, logging, detection, vulnerability management)
• Design and build secure cloud landing zone patterns
• Translate policy and regulatory requirements into technical controls
• Develop reusable security frameworks (Terraform modules, policy-as-code, pipelines)
• Make strategic tooling and integration decisions
• Provide technical leadership across engineering teams and partners

What are we looking for?

• Strong AWS security architecture and engineering experience
• Hands-on development (Python preferred)
• Infrastructure-as-Code (Terraform)
• Experience building cloud platforms or shared services
• Experience in large-scale, multi-account environments
• Experience in regulated industries is desirable
• Experience with AI/LLM security or advanced detection is desirable
• Hands-on engineering capability (recent coding experience)
• AWS-native experience (not generic cloud)
• Automation-first mindset
• Experience working at scale
• Airline/Regulated industry experience is nice to have
• Platform engineering background is nice to have
• Fluent in English

What can you expect from us?

• A permanent job contract for a long term project;
• Tech equipment + SIM Card + personal smartphone;
• Health and Life Insurance;
• Social events and team buildings;
• The commitment of letting you grow with us, and be rewarded accordingly;
• A dynamic and young team that will be always there to support you;
• Training in the latest technologies;
• Coffee, fruits, snacks and a warm welcoming when you pass by the office.