Cloud Security Architect

Veriipro; Atlanta (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

Veriipro is seeking an experienced Cloud Security Architect to design, implement, and govern IAM controls across a large AWS multi-account environment. The role focuses on enforcing least-privilege access and secure cross-account access management.

You will also automate security tasks, support audits, and collaborate with engineering, cybersecurity, and compliance teams to uphold security governance.

Qualifications

• Hands-on experience with AWS IAM policies, roles, trust relationships and permission boundaries.
• Strong understanding of cloud security architecture, governance, and best practices.
• Experience implementing automated security controls and compliance checks.
• Knowledge of PAM solutions and secure credential management.

Responsibilities

• Design, implement, and govern IAM controls across a large AWS multi-account environment.
• Enforce least-privilege access and manage cross-account access controls.
• Automate security tasks and compliance checks using scripting or cloud-native tools.
• Support security audits, risk assessments, and regulatory compliance initiatives.
• Collaborate with engineering, cybersecurity, and compliance teams on security best practices.

Skills

AWS IAM

Cloud security architecture

Security compliance

Privileged access management (PAM)

Job description

We are seeking an experienced Cloud Security Architect to design, implement, and govern Identity and Access Management (IAM) controls across a large-scale AWS multi-account environment.

Key Responsibilities

• Design, implement, and maintain AWS IAM policies, roles, permission boundaries, and cross-account access controls.
• Enforce least-privilege access across AWS accounts and cloud resources.
• Secure privileged and non-privileged identities through effective access management and governance practices.
• Implement and manage Privileged Access Management (PAM) controls and identity governance processes.
• Develop and maintain cloud security standards, policies, and governance frameworks.
• Identify and remediate IAM misconfigurations, excessive permissions, and access-related security risks.
• Automate security controls, compliance checks, and access reviews using scripting and cloud-native tools.
• Monitor cloud security posture and support continuous compliance with enterprise security policies.
• Collaborate with cloud engineering, cybersecurity, infrastructure, and compliance teams to implement security best practices.
• Support security audits, risk assessments, and regulatory compliance initiatives.

Required Skills and Experience

1. AWS Identity and Access Management (IAM)

• Strong hands-on experience with AWS IAM policies, roles, trust relationships, and permission boundaries.
• Experience managing IAM across large-scale AWS multi-account environments.
• Understanding of cross-account access, federation, SSO, and least-privilege principles.
• Experience identifying and remediating excessive permissions and IAM security risks.

2. Cloud Security Architecture and Governance

• Strong understanding of AWS security architecture and cloud security best practices.
• Experience implementing cloud security controls, governance policies, and access management standards.
• Knowledge of privileged and non-privileged identity security.
• Understanding of cloud security posture management and identity governance concepts.

3. Security Compliance and Automation

• Experience implementing automated security controls and compliance checks.
• Knowledge of cloud security frameworks and standards, such as NIST and CIS benchmarks.
• Ability to automate security tasks using scripting or cloud-native tools.
• Experience supporting security audits, compliance assessments, and remediation activities.

4. Privileged Access Management (PAM)

• Knowledge of PAM solutions, privileged account controls, and secure credential management.
• Understanding of identity lifecycle management, access reviews, and governance processes.