Hybrid AWS Security Architect | Terraform & Policy-as-Code

Piper Companies; Reston (VA); Hybrid; USD 140,000 - 160,000; Full time

Benefits offered by this job

PTO

Paid Holidays

Medical

Dental

Vision

401K

Sick Leave

Job summary

Zachary Piper Solutions is seeking a Senior Security Architect to lead cloud infrastructure security across AWS environments, focusing on Terraform-based deployments and policy-as-code frameworks. This hybrid role is based in Reston, VA, with three days onsite per week.

You will define secure configuration standards, review new AWS services, and collaborate with engineering and security teams to build scalable guardrails for enterprise-scale AWS platforms from design through production.

Qualifications

• 7+ years in cloud security, cloud architecture, or platform engineering within enterprise environments.
• Hands-on Terraform module development and infrastructure deployments.
• Experience with policy-as-code frameworks such as Sentinel, Open Policy Agent (OPA/Rego), or Checkov.
• Strong AWS expertise, including IAM, KMS, VPC networking, logging, and cloud security architecture.

Responsibilities

• Define and document secure configuration standards and security models for AWS services
• Review new AWS services and develop security requirements for implementation teams
• Evaluate and approve policy-as-code rules prior to deployment and publication
• Review Terraform code, reusable modules, and infrastructure deployments for security best practices
• Partner with engineering, platform, and security teams to implement scalable cloud security controls

Skills

Cloud security

AWS security best practices

Security standards definition

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Policy-as-code tooling (Sentinel/OPA/Checkov)

Job description

Zachary Piper Solutions is seeking a Senior Security Architect to lead cloud infrastructure security across AWS environments, focusing on Terraform-based deployments and policy-as-code frameworks. This hybrid role is based in Reston, VA, with three days onsite per week.

You will define secure configuration standards, review new AWS services, and collaborate with engineering and security teams to build scalable guardrails for enterprise-scale AWS platforms from design through production.