AWS Cloud Security Architect

Hexa Consulting; Porto; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Private health insurance

Mental health support

Childcare vouchers

Job summary

Hexa Consulting is seeking an AWS Cloud Security Architect to join a client team in a hybrid model based in Lisbon or Porto. The role emphasizes secure, scalable AWS architectures, multi-account governance and automation.

You will lead security-centric cloud foundations, IAM governance and CI/CD security integration, delivering reusable security controls and policy-driven infrastructure. English proficiency at C1 is required.

Qualifications

• Extensive experience designing and implementing AWS cloud security architectures in complex enterprise environments.
• Ownership of cloud security architecture decisions, technical implementation and delivery.
• Strong hands-on experience with Terraform, Python and infrastructure automation.
• Experience designing and securing large-scale, multi-account AWS environments.
• Solid knowledge of AWS IAM, access controls and cloud landing zones.
• Experience implementing security-as-code, policy-as-code and automated security controls.
• Strong understanding of DevOps practices, CI/CD security integration and cloud platform engineering.
• Experience with cloud security monitoring, threat detection, vulnerability management and security controls.
• Translate security architecture requirements into scalable, maintainable engineering solutions.
• Strong technical judgment, autonomy, accountability and collaborative leadership skills.
• English proficiency at C1 level.

Responsibilities

• Define and deliver secure, scalable AWS cloud architectures and reusable security controls.
• Design secure cloud foundations covering governance, identity and access management, monitoring and threat detection.
• Translate technical security requirements and regulatory obligations into practical cloud infrastructure controls.
• Develop automated security solutions using Infrastructure-as-Code, policy-as-code and CI/CD pipelines.
• Evaluate cloud security technologies and define appropriate integration strategies.
• Implement engineering solutions that strengthen security consistency, operational efficiency and platform resilience.
• Provide architectural guidance and technical leadership to engineering teams and external partners.
• Integrate security practices into cloud platform engineering, DevOps workflows and software delivery processes.
• Promote continuous improvement, automation and high-quality security engineering practices.

Skills

AWS security architecture

Cloud security

DevOps security

CI/CD security

Security automation

Threat detection

Tools

Terraform

Job description

Hexa Consulting is looking for an AWS Cloud Security Architect to join our Client's team in a hybrid work model from Lisbon or Porto.

Lisbon or Porto, Portugal | Hybrid: 1 day per week at the office | Aviation Sector

Mandatory Requirements

• Extensive professional experience designing and implementing AWS cloud security architectures in complex enterprise environments.
• Proven ownership of cloud security architecture decisions, technical implementation and delivery.
• Strong hands‑on experience with Terraform, Python and infrastructure automation.
• Experience designing and securing large‑scale, multi‑account AWS environments.
• Solid knowledge of AWS Identity and Access Management (IAM), access controls and cloud landing zones.
• Experience implementing security‑as‑code, policy‑as‑code and automated security controls.
• Strong understanding of DevOps practices, CI/CD security integration and cloud platform engineering.
• Experience with cloud security monitoring, threat detection, vulnerability management and security controls.
• Ability to translate security architecture requirements into scalable, maintainable engineering solutions.
• Strong technical judgment, autonomy, accountability and collaborative leadership skills.
• English proficiency at C1 level.

Nice to Have

• Experience implementing cloud security solutions in regulated industries.
• Knowledge of cybersecurity requirements within the aviation sector.
• Exposure to security considerations for Artificial Intelligence and Large Language Models (LLMs).
• Experience with advanced security detection capabilities.
• Familiarity with cloud platforms beyond AWS.
• Previous involvement in platform engineering initiatives.
• Cloud Platform: Amazon Web Services (AWS), Multi‑Account Architecture, Cloud Landing Zones.
• Identity & Access: AWS IAM, Access Control, Cloud Security Governance.
• Infrastructure‑as‑Code: Terraform.
• Programming & Automation: Python, Security‑as‑Code, Policy‑as‑Code.
• Security Operations: Cloud Logging, Security Monitoring, Threat Detection, Vulnerability Management.
• Platform Engineering: Reusable Infrastructure Components, Cloud Security Architecture Patterns.

Key Responsibilities

• Define and deliver secure, scalable AWS cloud architectures and reusable security controls.
• Design secure cloud foundations covering governance, identity and access management, monitoring and threat detection.
• Translate technical security requirements and regulatory obligations into practical cloud infrastructure controls.
• Develop automated security solutions using Infrastructure‑as‑Code, policy‑as‑code and CI/CD pipelines.
• Evaluate cloud security technologies and define appropriate integration strategies.
• Implement engineering solutions that strengthen security consistency, operational efficiency and platform resilience.
• Provide architectural guidance and technical leadership to engineering teams and external partners.
• Integrate security practices into cloud platform engineering, DevOps workflows and software delivery processes.
• Promote continuous improvement, automation and high‑quality security engineering practices.

What We Offer

• Work Model: Hybrid, with 1 day per week at the office in Lisbon or Porto.
• A culture where each person is encouraged to act as a Builder, contributing with ownership, responsibility and impact.
• A collaborative environment built on Honesty, Mutual Support and Agility.
• Continuous learning and certification support throughout your journey.
• Private health insurance from day one, with optional family extension.
• Confidential mental health support through TEAM 24, including psychological support, content and live sessions.
• Childcare vouchers and practical family support measures.
• Opportunities to grow through exposure to quality management, information security, AI governance and cybersecurity best practices.

Hexa is committed to equal opportunity, inclusion and fair access to professional growth. We value diverse backgrounds, perspectives and experiences, and we support the principles of the Portuguese Diversity Charter in the way we build teams and opportunities.

Life at Hexa means being part of a community of Builders. We work with transparency, support each other across projects and geographies, and stay focused on learning, adapting and delivering work that creates real impact.