AWS-02 · CCoE Cloud Architect — Architecture & Security

MegazoneCloud; Irvine (CA); On-site; USD 160,000 - 190,000; Full time

Job summary

MegazoneCloud seeks an experienced Cloud Architect to lead landing-zone and account architecture for a multicloud managed service. You will set standards for AWS designs, review business-unit requests, and decide on secure, scalable deployments for a major automotive enterprise.

You will own security architecture across IAM, encryption, logging and guardrails, drive posture using Security Hub/GuardDuty/Config/Inspector, and guide other teams in architecture governance.

Qualifications

• 7+ years in cloud infrastructure with 4+ years designing on AWS at enterprise scale.
• Ownership of an AWS multi-account landing zone with guardrails and account vending.
• Deep AWS security expertise: IAM policy design, SCPs, KMS, VPC security, centralized logging.
• Experience governing other teams’ designs and enforcing standards.
• Fluency in Korean and English.

Responsibilities

• Own landing-zone and account architecture standards, including networking and identity.
• Review business-unit architectures and change requests for compliance with standards.
• Own security architecture and ensure least privilege, encryption, and boundary protection.
• Drive vulnerability and compliance posture across the estate using Security Hub, GuardDuty, Config, Inspector.
• Produce reference patterns and documentation for platform and operations teams.
• Act as senior escalation for architecture and security incidents.
• Explain architecture and risk decisions to Korean-speaking clients and HQ.

Skills

AWS multi-account design

Landing zone ownership

Security architecture

IAM policy design

Guardrails and account vending

KMS and encryption

VPC security architecture

Logging and monitoring

Cross-team governance

Korean and English fluency

Tools

Control Tower

AWS Security Hub

GuardDuty

Config

Inspector

Job description

The role

Megazone US is an AWS Premier Tier Services Partner and part of MegazoneCloud, headquartered in Seoul. This seat joins a dedicated 22-person team delivering a multicloud managed service — AWS, Azure and Google Cloud across roughly 155 cloud accounts — to a major automotive enterprise client and its business units. You are the architecture and security authority inside the client’s Cloud Center of Excellence: you set the standard for how AWS accounts are built and secured, you review what the business units want to deploy, and you are the person who decides whether a design is safe to run.

What you will do

• - Own landing-zone and account architecture standards — account structure, organizational units, networking, identity, logging and guardrails.


• - Review business-unit architectures and change requests, and approve, reject or improve them against the standard.


• - Own security architecture: IAM and least privilege, encryption, boundary protection, secrets handling and the security baseline every account is measured against.


• - Drive vulnerability and compliance posture across the estate (Security Hub, GuardDuty, Config, Inspector) and push remediation through the operations team.


• - Produce the reference patterns and documentation that platform and operations engineers build from.


• - Act as senior technical escalation for architecture and security incidents.


• - Explain architecture and risk decisions to Korean-speaking client and HQ stakeholders, in writing and in meetings.

What we need — must have

• - 7+ years in cloud infrastructure, including 4+ years designing on AWS at enterprise scale (multi-account, multi-VPC).


• - Demonstrable ownership of an AWS multi-account landing zone — Control Tower or an equivalent custom build — including guardrails and account vending.


• - Deep AWS security: IAM policy design, SCPs, KMS, VPC security architecture, centralized logging and the AWS security services.


• - Track record of governing other teams’ designs: architecture review, standards enforcement, saying no constructively.


• - Professional working fluency in Korean and English.


• - Able to work onsite in Irvine, CA.

Nice to have

AWS Solutions Architect Professional or Security Specialty MSP or consultancy background Automotive, manufacturing or Korean-affiliated enterprise experience SOC 2 / ISO 27001 / NIST control mapping Working knowledge of Azure and Google Cloud security

Working pattern — please read before applying

• - Core hours are standard US Pacific business hours, onsite in Irvine.


• - Evening and early-morning work is a regular part of this role: recurring calls with Megazone HQ and client teams in Korea (KST is 16 hours ahead of Pacific), plus planned maintenance windows outside business hours.


• - Senior escalation point for architecture and security incidents, including out of hours.

Standard terms

Onsite at the client site in Irvine, CA — this is a contractual commitment and the seat is not available remotely. Must be authorized to work in the US (sponsorship to be confirmed by Megazone US HR), able to pass client background screening, and able to work within our SOC 2 control environment. Work is delivered through a documented ITIL-style process — tickets, change control, runbooks, post-incident reviews — and most of the delivery record is written and read by the client.

Why You'll Love It Here

• - Our Product is Our People: We live by this. We invest in people who invest in themselves. Your growth is our growth.


• - True Servant Leadership: Our CTO leads with a \"force multiplier\" philosophy. Management is here to empower you and clear roadblocks, not to micromanage. We won't ask you to do anything we\'re not willing to do ourselves.


• - Flat Organization, Real Impact: Your voice and designs will directly shape our technical roadmap and our clients\' success. You\'ll work on the latest tech to solve real problems.


• - A \"Learn-from-it\" Culture: We\'re moving fast and building new things. We believe mistakes are learning opportunities, not failures.

We seek diverse talent who are ready to make an immediate impact. We believe that innovation thrives when teams are built with a variety of backgrounds, experiences, and perspectives. If you are excited by this mission, we encourage you to apply, even if your experience doesn't perfectly match every qualification listed.

Megazone Cloud is an Equal Opportunity Employer and participates in E-Verify to confirm the employment eligibility of all new hires.

Compensation

Base Salary $160K – $190K