AWS Cloud Security Architect with Landing Zone Security(Remote)

LTM; Houston (TX); On-site; USD 140,000 - 220,000; Full time

Benefits offered by this job

Comprehensive Medical Plan Covering

Short/Long-Term Disability Coverage

401(k) Plan with Company match

Life Insurance

Vacation Time, Sick Leave, Holidays

Paternity and Maternity Leave

Job summary

LTIMindtree is seeking an experienced AWS Cloud Security Architect to design, implement and secure AWS Landing Zones for government workloads. The role emphasizes enabling AWS native security controls, guardrails, and encryption across the cloud environment.

The candidate will integrate enterprise identity platforms, establish compliant logging and monitoring, and ensure governance across multiple accounts with SCPs and Config rules. This is a remote opportunity with US-wide applicability.

Qualifications

• Design, implement and secure AWS Landing Zones for government workloads.

Responsibilities

• AWS Landing Zone Security.
• Implement and secure AWS landing zones aligned with security and compliance requirements.
• Configure AWS Organizations Service Control Policies (SCPs) and security guardrails.
• Establish tagging standards, governance controls, and compliance baselines across cloud accounts.
• Configure AWS Config rules and compliance monitoring controls.
• Identity and Access Management integration.
• Design and implement RBAC.

Skills

AWS security

RBAC

IAM

Security architecture

Cloud governance

Config monitoring

Encryption

Logging

SCPs

Landing Zone

Tools

AWS Organizations

IAM Identity Center

Microsoft Entra ID

Job description

Job Title : AWS Cloud Security Architect with Landing Zone Security

Location: Remote

Role Summary

We are seeking an experienced Cloud Security Architect to design implement and secure AWS landing zones supporting government workloads.

The individual will be responsible for enabling AWS native security controls implementing security guardrails integrating enterprise identity and security platforms and establishing compliant logging monitoring and encryption capabilities across the cloud environment.

Key Responsibilities

• AWS Landing Zone Security.
• Implement and secure AWS landing zones aligned with security and compliance requirements.
• Configure AWS Organizations Service Control Policies SCPs account governance and security guardrails.
• Establish tagging standards governance controls and compliance baselines across cloud accounts.
• Configure AWS Config rules and compliance monitoring controls.
• Identity Access Management.
• Integrate Microsoft Entra ID GCC High with AWS IAM Identity Center.
• Design and implement rolebased access control RBAC.

Actual compensation within the range will be dependent upon the individual's skills, experience, performance and internal equity.

Benefits/perks listed below may vary depending on the nature of your employment with LTIMindtree (“LTIM”):

Benefits And Perks

• Comprehensive Medical Plan Covering Medical, Dental, Vision
• Short Term and Long-Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave

The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job-related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay and other forms of bonus or variable compensation.

The compensation and benefits information provided herein is accurate as of the date of this posting.

LTIMindtree is an equal opportunity employer that is committed to diversity in the workplace. Our employment decisions are made without regard to race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), gender identity or expression, national origin, ancestry, age, family-care status, veteran status, marital status, civil union status, domestic partnership status, military service, handicap or disability or history of handicap or disability, genetic information, atypical hereditary cellular or blood trait, union affiliation, affectional or sexual orientation or preference, or any other characteristic protected by applicable federal, state, or local law, except where such considerations are bona fide occupational qualifications permitted by law.