Cloud Security Architect – AWS, Terraform & Landing Zones

Expleo Group; Lisboa; On-site; EUR 60,000 - 80,000; Full time

Job summary

Expleo Group is seeking a security-focused engineer to define and implement secure architectures across AWS, automation, and cloud platforms. The role involves hands-on development, IaC with Terraform, and leading security initiatives across large, multi-account environments.

Ideal candidates have strong cloud security experience, the ability to translate policy into technical controls, and a track record of delivering reusable security frameworks within complex environments.

Qualifications

• Proven AWS security architecture and engineering experience.
• Hands-on development in Python.
• Strong experience with Terraform for IaC.
• Experience building cloud platforms or shared services.
• Experience in large-scale, multi-account environments.

Responsibilities

• Define and implement security reference architectures (IAM, logging, detection, vulnerability management).
• Design and build secure cloud landing zone patterns.
• Translate policy and regulatory requirements into technical controls.
• Develop reusable security frameworks (Terraform modules, policy-as-code, pipelines).
• Make strategic tooling and integration decisions.
• Provide technical leadership across engineering teams and partners.

Skills

AWS security architecture

Python development

Cloud platforms

Multi-account environments

Tools

Terraform

Job description

Expleo Group is seeking a security-focused engineer to define and implement secure architectures across AWS, automation, and cloud platforms. The role involves hands-on development, IaC with Terraform, and leading security initiatives across large, multi-account environments.

Ideal candidates have strong cloud security experience, the ability to translate policy into technical controls, and a track record of delivering reusable security frameworks within complex environments.