AWS Cloud Security Architect - Secure Landing Zones, Hybrid

OSQuay; Lisboa, Porto; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid: Lisbon/Porto

Immediate start

Health insurance

Sports benefits

Discount network

Training & certs

Career development

Knowledge sharing

Manager & People support

Job summary

OSQuay is seeking an AWS Cloud Security Architect to join a major aviation-sector project. You will design security architecture and implement it as code in an AWS-first environment, helping build a cloud-native security capability from the ground up.

Responsibilities include defining IAM, logging, detection, and vulnerability management architectures, and delivering secure landing zones. The role offers hybrid work in Lisbon/Porto and an opportunity to influence security at scale while working

Qualifications

• Strong hands-on AWS security architecture and engineering experience.
• Recent hands-on development, ideally in Python.
• Infrastructure-as-Code with Terraform.
• Experience building cloud platforms or shared services in large, multi-account environments.
• Delivers working solutions, not just documentation.

Responsibilities

• Define and implement security reference architectures (IAM, logging, detection, vulnerability management).
• Design and build secure AWS landing zone patterns.
• Turn policy and regulatory requirements into technical controls.
• Develop reusable security frameworks: Terraform modules, policy-as-code, pipelines.
• Provide technical leadership to engineering teams and partners.

Skills

AWS security

Python

Multi-account AWS

AI/LLM security

Tools

Terraform

Job description

OSQuay is seeking an AWS Cloud Security Architect to join a major aviation-sector project. You will design security architecture and implement it as code in an AWS-first environment, helping build a cloud-native security capability from the ground up.

Responsibilities include defining IAM, logging, detection, and vulnerability management architectures, and delivering secure landing zones. The role offers hybrid work in Lisbon/Porto and an opportunity to influence security at scale while working