AWS Cloud Security Architect | Secure Cloud Platform

OSQuay – an iLink Digital Company; Lisboa; Hybrid; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Health Insurance extendable to your 家庭

Sports benefits

Exclusive discounts through ourpartner

Training and development opportunities

Job summary

OSQuay – an iLink Digital Company is seeking an AWS Cloud Security Architect to help build a cloud-native security engineering capability for a major international aviation client. You will design security architectures and implement them as code within an AWS-first environment.

You will define reference architectures, landing zone patterns, and policy-driven controls while delivering working security solutions across a multi-account AWS setup.

Qualifications

• Strong, hands-on AWS security architecture and engineering experience.
• Recent hands-on development, ideally in Python.
• Infrastructure-as-Code with Terraform.
• Experience building cloud platforms or shared services in large, multi-account environments.
• Designs and delivers working solutions rather than just documentation.

Responsibilities

• Define and implement security reference architectures (IAM, logging, detection, vulnerability management)
• Design and build secure AWS landing zone patterns
• Turn policy and regulatory requirements into technical controls
• Develop reusable security frameworks: Terraform modules, policy-as-code, pipelines
• Make tooling and integration decisions and provide technical leadership to engineering teams and partners

Skills

AWS security

Python

Cloud security architecture

Infrastructure-as-Code

Multi-account environments

Tools

Terraform

Job description

OSQuay – an iLink Digital Company is seeking an AWS Cloud Security Architect to help build a cloud-native security engineering capability for a major international aviation client. You will design security architectures and implement them as code within an AWS-first environment.

You will define reference architectures, landing zone patterns, and policy-driven controls while delivering working security solutions across a multi-account AWS setup.