AWS-02 · CCoE Cloud Architect — Architecture & Security

MegazoneCloud US; Irvine (CA); On-site; USD 160,000 - 190,000; Full time

Job summary

Megazone US is a leading cloud services partner focused on AWS multi-account architectures and security. You will define landing-zone standards, review architectures, and lead security design across enterprise deployments for a major automotive client.

Onsite in Irvine, CA, you will champion IAM, encryption, logging, and guardrails while collaborating with Korean-speaking stakeholders. The role expects 7+ years in cloud infra and hands-on leadership in security governance.

Qualifications

• 7+ years in cloud infrastructure, including enterprise AWS design and security.
• Ownership of an AWS multi-account landing zone with guardrails.
• Deep AWS security focus: IAM, SCPs, encryption, logging and baseline security.

Responsibilities

• Own landing-zone and account architecture standards — structure, OU, networking, identity, logging, guardrails.
• Review business-unit architectures and change requests for compliance with standards.
• Own security architecture: IAM, encryption, boundary protection, secrets handling and baseline across accounts.
• Drive vulnerability and compliance posture using Security Hub, GuardDuty, Config, Inspector; drive remediation with ops teams.
• Produce reference patterns and documentation for platform and ops teams.

Skills

Cloud infra

AWS architecture

Security architecture

Multi-account landing zone

IAM policy design

VPC security

Stakeholder comms

Tools

AWS Control Tower

GuardDuty

Config

Inspector

KMS

Job description

Megazone US is an AWS Premier Tier Services Partner and part of MegazoneCloud, headquartered in Seoul. This seat joins a dedicated 22-person team delivering a multicloud managed service — AWS, Azure and Google Cloud across roughly 155 cloud accounts — to a major automotive enterprise client and its business units. You are the architecture and security authority inside the client’s Cloud Center of Excellence: you set the standard for how AWS accounts are built and secured, you review what the business units want to deploy, and you are the person who decides whether a design is safe to run.

Megazone US is an AWS Premier Tier Services Partner and part of MegazoneCloud, headquartered in Seoul. This seat joins a dedicated 22-person team delivering a multicloud managed service — AWS, Azure and Google Cloud across roughly 155 cloud accounts — to a major automotive enterprise client and its business units. You are the architecture and security authority inside the client’s Cloud Center of Excellence: you set the standard for how AWS accounts are built and secured, you review what the business units want to deploy, and you are the person who decides whether a design is safe to run.

What You Will Do

• Own landing-zone and account architecture standards — account structure, organizational units, networking, identity, logging and guardrails.
• Review business-unit architectures and change requests, and approve, reject or improve them against the standard.
• Own security architecture: IAM and least privilege, encryption, boundary protection, secrets handling and the security baseline every account is measured against.
• Drive vulnerability and compliance posture across the estate (Security Hub, GuardDuty, Config, Inspector) and push remediation through the operations team.
• Produce the reference patterns and documentation that platform and operations engineers build from.
• Act as senior technical escalation for architecture and security incidents.
• Explain architecture and risk decisions to Korean-speaking client and HQ stakeholders, in writing and in meetings.

What We Need — Must Have

• 7+ years in cloud infrastructure, including 4+ years designing on AWS at enterprise scale (multi-account, multi-VPC).
• Demonstrable ownership of an AWS multi-account landing zone — Control Tower or an equivalent custom build — including guardrails and account vending.
• Deep AWS security: IAM policy design, SCPs, KMS, VPC security architecture, centralized logging and the AWS security services.
• Track record of governing other teams’ designs: architecture review, standards enforcement, saying no constructively.
• Professional working fluency in Korean and English.
• Able to work onsite in Irvine, CA.

Nice to have

AWS Solutions Architect Professional or Security Specialty

• MSP or consultancy background
• Automotive, manufacturing or Korean-affiliated enterprise experience
• SOC 2 / ISO 27001 / NIST control mapping
• Working knowledge of Azure and Google Cloud security

Working pattern — please read before applying

• Core hours are standard US Pacific business hours, onsite in Irvine.
• Evening and early-morning work is a regular part of this role: recurring calls with Megazone HQ and client teams in Korea (KST is 16 hours ahead of Pacific), plus planned maintenance windows outside business hours.
• Senior escalation point for architecture and security incidents, including out of hours.

Standard terms

Onsite at the client site in Irvine, CA — this is a contractual commitment and the seat is not available remotely. Must be authorized to work in the US (sponsorship to be confirmed by Megazone US HR), able to pass client background screening, and able to work within our SOC 2 control environment. Work is delivered through a documented ITIL-style process — tickets, change control, runbooks, post-incident reviews — and most of the delivery record is written and read by the client.

Why You'll Love It Here

• Our Product is Our People: We live by this. We invest in people who invest in themselves. Your growth is our growth.
• True Servant Leadership: Our CTO leads with a "force multiplier" philosophy. Management is here to empower you and clear roadblocks, not to micromanage. We won't ask you to do anything we're not willing to do ourselves.
• Flat Organization, Real Impact: Your voice and designs will directly shape our technical roadmap and our clients' success. You'll work on the latest tech to solve real problems.
• A "Learn-from-it" Culture: We're moving fast and building new things. We believe mistakes are learning opportunities, not failures.

We seek diverse talent who are ready to make an immediate impact. We believe that innovation thrives when teams are built with a variety of backgrounds, experiences, and perspectives. If you are excited by this mission, we encourage you to apply, even if your experience doesn't perfectly match every qualification listed.

Megazone Cloud is an Equal Opportunity Employer and participates in E-Verify to confirm the employment eligibility of all new hires.

Compensation Range: $160K - $190K