AWS Cloud Security Architect

OSQuay; Lisboa, Porto; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid: Lisbon/Porto

Immediate start

Health insurance

Sports benefits

Discount network

Training & certs

Career development

Knowledge sharing

Manager & People support

Job summary

OSQuay is seeking an AWS Cloud Security Architect to join a major aviation-sector project. You will design security architecture and implement it as code in an AWS-first environment, helping build a cloud-native security capability from the ground up.

Responsibilities include defining IAM, logging, detection, and vulnerability management architectures, and delivering secure landing zones. The role offers hybrid work in Lisbon/Porto and an opportunity to influence security at scale while working

Qualifications

• Strong hands-on AWS security architecture and engineering experience.
• Recent hands-on development, ideally in Python.
• Infrastructure-as-Code with Terraform.
• Experience building cloud platforms or shared services in large, multi-account environments.
• Delivers working solutions, not just documentation.

Responsibilities

• Define and implement security reference architectures (IAM, logging, detection, vulnerability management).
• Design and build secure AWS landing zone patterns.
• Turn policy and regulatory requirements into technical controls.
• Develop reusable security frameworks: Terraform modules, policy-as-code, pipelines.
• Provide technical leadership to engineering teams and partners.

Skills

AWS security

Python

Multi-account AWS

AI/LLM security

Tools

Terraform

Job description

We are looking for an AWS Cloud Security Architect to join a project with a major international client in the aviation sector.

You'll help build a cloud-native security engineering capability from the ground up, designing security architecture and implementing it as code within a modern AWS-first environment.

Requirements

Strong, hands-on AWS security architecture and engineering experience

Recent hands-on development, ideally in Python

Infrastructure-as-Code with Terraform

Experience building cloud platforms or shared services in large, multi-account environments

Someone who designs and builds, and delivers working solutions rather than just documentation

Nice to have: experience in regulated industries (aviation, finance, insurance...); multi-cloud exposure or a platform engineering background; AI/LLM security or advanced threat detection experience.

Main responsibilities

Define and implement security reference architectures (IAM, logging, detection, vulnerability management)

Design and build secure AWS landing zone patterns

Turn policy and regulatory requirements into technical controls

Develop reusable security frameworks: Terraform modules, policy-as-code, pipelines

Make tooling and integration decisions and provide technical leadership to engineering teams and partners

What we have to offer

Hybrid model: one day per week at the office in Lisbon (Oriente) or Porto

An early-stage role with real influence on how a large organisation secures its cloud

Immediate start

A comprehensive benefits package, including Health insurance extendable to your household, sports benefits and other exclusive discounts through our partner network

Challenging international projects, working with leading clients across different industries

Continuous learning and development opportunities, with access to training, certifications, and career development initiatives

A culture of knowledge sharing, collaboration, and continuous improvement

Dedicated support from both your Manager and our People team, ensuring you have the tools, feedback, and opportunities to achieve your career goals