AWS Cloud Security Architect — GenAI & Cloud Risk Lead

Energy Jobline ZR; Knoxville (TN); On-site; USD 140,000 - 190,000; Full time

Job summary

System One seeks an AWS Cloud Security Architect to lead security architecture across enterprise apps and AWS/cloud environments, including hybrid setups. The role focuses on defining security patterns, threat modeling, and implementing guardrails to protect data and AI-enabled applications.

The candidate will collaborate with engineering and business teams, perform risk assessments, and ensure compliance with NIST, FedRAMP, and FIPS.

Qualifications

• 8+ years IT experience with cybersecurity and cloud security.
• 5+ years cybersecurity architecture experience in roles like Information Security Architect, Cloud Security Architect, or Infrastructure Security Architect.
• 5+ years hands-on AWS cloud security experience securing enterprise workloads and migrations.
• Strong knowledge of AWS security services, IAM, networking, logging, monitoring, data protection, and cloud security best practices.
• Experience securing enterprise cloud and hybrid environments and performing security architecture reviews.
• Experience with threat modeling, security risk assessments, control gap analysis, and remediation planning.
• Knowledge of NIST, FedRAMP, and FIPS.
• Experience defining security standards, patterns, guardrails, and controls.
• Working knowledge of AI/GenAI security including prompt injection and data leakage.
• Understanding of LLMs, RAG solutions, APIs, containers, and enterprise data integrations.

Responsibilities

• Provide security architecture guidance for enterprise apps, AWS cloud environments, hybrid infra, APIs, containers, data solutions, and AI-enabled apps.
• Partner with application and engineering teams to securely migrate workloads to AWS and other approved cloud platforms.
• Define and maintain cloud security patterns, standards, guardrails, requirements, reference architectures, and implementation guidance.
• Conduct security architecture reviews, threat modelling, and risk assessments for cloud, hybrid, API, container, third-party, and AI/GenAI solutions.
• Define appropriate security controls and remediation or compensating controls for identified gaps.
• Support secure AI/GenAI adoption, including LLM integrations, RAG, prompt security, data protection, access controls, monitoring, and human-in-the-loop safeguards.
• Support AI governance and risk management processes, including security reviews and incident escalation.
• Assess solutions against frameworks like NIST, FedRAMP, and FIPS.
• Provide security guidance during evaluations, architecture reviews, security exceptions, and path to production.
• Collaborate with cybersecurity engineering and operations on SIEM, network security, endpoint security, data protection, and security configuration.
• Communicate risks, requirements, and recommendations clearly to technical teams and business stakeholders.

Skills

Security architecture

Cloud security

Threat modeling

Communication skills

Stakeholder management

Written and verbal communication

Security risk assessments

Architectural reviews

Education

Bachelor's degree in Computer Science or Information Systems

CISSP, CCSP, CISA, CISM, GIAC or similar cert

AWS Certified Security – Specialty or Azure AZ-500

Tools

AWS

Azure

GCP

SIEM

Firewalls

Job description

System One seeks an AWS Cloud Security Architect to lead security architecture across enterprise apps and AWS/cloud environments, including hybrid setups. The role focuses on defining security patterns, threat modeling, and implementing guardrails to protect data and AI-enabled applications.

The candidate will collaborate with engineering and business teams, perform risk assessments, and ensure compliance with NIST, FedRAMP, and FIPS.