AWS Cloud Architect: Enterprise Security & Landing Zone Lead

MegazoneCloud; Irvine (CA); On-site; USD 160,000 - 190,000; Full time

Job summary

MegazoneCloud seeks an experienced Cloud Architect to lead landing-zone and account architecture for a multicloud managed service. You will set standards for AWS designs, review business-unit requests, and decide on secure, scalable deployments for a major automotive enterprise.

You will own security architecture across IAM, encryption, logging and guardrails, drive posture using Security Hub/GuardDuty/Config/Inspector, and guide other teams in architecture governance.

Qualifications

• 7+ years in cloud infrastructure with 4+ years designing on AWS at enterprise scale.
• Ownership of an AWS multi-account landing zone with guardrails and account vending.
• Deep AWS security expertise: IAM policy design, SCPs, KMS, VPC security, centralized logging.
• Experience governing other teams’ designs and enforcing standards.
• Fluency in Korean and English.

Responsibilities

• Own landing-zone and account architecture standards, including networking and identity.
• Review business-unit architectures and change requests for compliance with standards.
• Own security architecture and ensure least privilege, encryption, and boundary protection.
• Drive vulnerability and compliance posture across the estate using Security Hub, GuardDuty, Config, Inspector.
• Produce reference patterns and documentation for platform and operations teams.
• Act as senior escalation for architecture and security incidents.
• Explain architecture and risk decisions to Korean-speaking clients and HQ.

Skills

AWS multi-account design

Landing zone ownership

Security architecture

IAM policy design

Guardrails and account vending

KMS and encryption

VPC security architecture

Logging and monitoring

Cross-team governance

Korean and English fluency

Tools

Control Tower

AWS Security Hub

GuardDuty

Config

Inspector

Job description

MegazoneCloud seeks an experienced Cloud Architect to lead landing-zone and account architecture for a multicloud managed service. You will set standards for AWS designs, review business-unit requests, and decide on secure, scalable deployments for a major automotive enterprise.

You will own security architecture across IAM, encryption, logging and guardrails, drive posture using Security Hub/GuardDuty/Config/Inspector, and guide other teams in architecture governance.