AWS Cloud Security Architect - Build Secure SaaS

InvestCloud, Inc.; United States; On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

AD&D insurance

HSA/FSA benefits

401(k) with company match

Paid time off

Job summary

InvestCloud is seeking a Cloud Security Architect with deep AWS security experience to design and build the AWS environment for our SaaS platform. You will own security across identity, networks, containers, storage, encryption, and logging, partnering with developers and infrastructure engineers.

Responsibilities include designing security baselines, logging, guardrails, and collaboration with our security stack, including Wiz, to fix cloud risk from code to runtime.

Qualifications

• Minimum eight years in security engineering or architecture, with five+ years hands-on AWS security in multi-account environments.
• Proven expertise in AWS identity, networking, encryption, and container security.

Responsibilities

• Design the security architecture for our AWS environment and collaborate with development teams.
• Set secure baselines for IAM, networking, containers, storage, encryption, and key management.
• Design security logging and monitoring across all AWS accounts and workloads.
• Review cloud designs and changes and provide practical guidance to keep projects moving.
• Build guardrails and automated checks to prevent insecure configurations in production.
• Collaborate with Application Security Architect to use Wiz for cloud risk fixing from code to runtime.
• Write reference architectures and patterns enabling secure build processes.
• Mentor engineers across the company.

Skills

AWS security

Multi-account security

Identity and access management

Container security

Logging and monitoring

Clear risk communication

Education

Bachelor's degree in CS or related field

AWS certifications (preferred)

Tools

Terraform

CloudFormation

Wiz

AWS IAM Identity Center

KMS / CloudHSM

CloudTrail / GuardDuty / Security Hub

Job description

InvestCloud is seeking a Cloud Security Architect with deep AWS security experience to design and build the AWS environment for our SaaS platform. You will own security across identity, networks, containers, storage, encryption, and logging, partnering with developers and infrastructure engineers.

Responsibilities include designing security baselines, logging, guardrails, and collaboration with our security stack, including Wiz, to fix cloud risk from code to runtime.