AWS Security Architect - Threat Modeling

System One, Inc.; Birmingham (AL); On-site; USD 150,000 - 190,000; Full time

Job summary

System One, Inc. is seeking an AWS Security Architect to define security requirements for AWS services, IaC, containers, APIs, data, and AI platforms. The role emphasizes building reusable security patterns and automating policy controls with Terraform Sentinel.

You will apply threat modeling and secure design principles across IAM, networking, storage, databases, serverless, and CI/CD services, ensuring alignment with NIST, OWASP, and other standards. On-site work is required.

Qualifications

• Deep experience securing AWS environments, including IAM, networking, storage, databases, serverless, containers, messaging, and CI/CD services.
• Strong background in information security architecture, application security, cloud security, and IaC security.
• Hands on threat modeling experience using STRIDE, attack trees, data flow analysis, and trust boundary analysis.
• Knowledge of CI/CD and DevSecOps security controls, including policy as code tools such as Terraform Sentinel.
• Experience with data security, encryption, key management, access controls, API security, and identity and access management.
• Familiarity with security standards and frameworks such as NIST, OWASP, CIS Benchmarks, FedRAMP, ISO, and SOX.
• Ability to turn security findings into clear, practical controls and guidance for technical teams.

Responsibilities

• Set security requirements for AWS services, Infrastructure as Code, containers, APIs, data, and AI platforms.
• Develop reusable security patterns and automate policy controls using tools such as Terraform Sentinel.

Skills

AWS security

IAM & networking

IaC security

Threat modeling

DevSecOps

Data security

CI/CD security

Compliance standards

Policy as code

Tools

Terraform Sentinel

Job description

no C2C with 3rd parties - W2 candidates only

Must be able to work on site 5 days a week - no remote work

AWS Security Architect

• Set security requirements for AWS services, Infrastructure as Code, containers, APIs, data, and AI platforms.

• Develop reusable security patterns and automate policy controls using tools such as Terraform Sentinel.

  Qualifications:

• Deep experience securing AWS environments, including IAM, networking, storage, databases, serverless, containers, messaging, and CI/CD services

• Strong background in information security architecture, application security, cloud security, and Infrastructure as Code security

• Hands on threat modeling experience using STRIDE, attack trees, data flow analysis, and trust boundary analysis

• Knowledge of CI/CD and DevSecOps security controls, including policy as code tools such as Terraform Sentinel

• Experience with data security, encryption, key management, access controls, API security, and identity and access management

• Familiarity with security standards and frameworks such as NIST, OWASP, CIS Benchmarks, FedRAMP, ISO, and SOX

• Ability to turn security findings into clear, practical controls and guidance for technical teams

Ref: #404-IT Pittsburgh

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.