Infosec Architect

Damco Solutions; Atlanta (GA); On-site; USD 180,000 - 230,000; Full time

Job summary

Damco Solutions seeks a Senior Information Security Architect with deep AWS expertise to lead cloud security architecture across multiple projects. You will collaborate with product owners and enterprise architects to design secure, compliant cloud solutions and enforce security standards.

The role emphasizes threat modeling, data protection, API security and secure DevSecOps practices, with a focus on complex, enterprise-scale deployments in AWS.

Qualifications

• Deep AWS architecture and security experience across services.
• Proven ability to threat model architectures and design mitigations.
• Experience with encryption, key management and data protection.

Responsibilities

• Lead AWS security architecture programs across projects with stakeholders.
• Assess and design security controls for cloud and SaaS environments.
• Perform threat modeling and validate security postures including AI workloads.
• Drive DevSecOps practices and secure CI/CD pipelines.

Skills

AWS Experience

Information Security Architecture

Threat Modelling

API Security

DevSecOps

Data Encryption & Key Management

Access Controls & IAM

Threat Detection & SIEM

Container Security

Education

AWS Certified (Professional / Specialty)

CISSP / CCSP or equivalent

Tools

CWPP tools

CSPM tools

SIEM platforms

CI/CD pipelines

Job description

Hiring for a Senior Information Security Architect position primarily focusing on AWS. This position requires deep expertise in Information Security principles including Business Security Architecture, Threat Modelling, Data Security (data encryption, masking, tokenization, data access controls), AWS Cloud and Systems architecture. This individual must be able to architect and ensure the security and compliance of the cloud environments based on enterprise cloud security policies, standards, procedures and industry best practices and frameworks (NIST, OWASP)

Self-starter and Senior Architect who can lead the AWS Security architecture program in multiple projects simultaneously by collaborating with numerous stakeholders (Product owners, Enterprise Architect)

Must Have

• 1 Public Cloud: AWS Experience
• Deep Expertise and proven Track record in AWS Architecture and AWS Services (Compute, IAM, RDS, Resource Policies, Network, Messaging, Data Storage, CI/CD, AI/ML, ETL, Serverless, ECS/EKS). Experience with AWS security pillars, best practices and well designed architecture. Experience in AI/ML is preferable.
• 2 Information Security Architecture
• Key experience: Application security, Threat Modelling, API Security, DevSecOps, Pipeline security, Infrastructure security, AuthN/Z, Encryption, Key Management, Data discovery and encryption, SIEM, CSPM, CWPP, Access Controls, Container Security
• Industry security standards and frameworks (OWASP, NIST CIS, FED Ramp, ISO, SOX etc.).
• Experience designing Architectures based on Security Standards and threat model the designs to identify issues and design mitigating controls.
• Key experience: System Design, API Driven architecture, Open Standards, stateless, Resiliency, High Availability, System and SaaS Integrations.
• 4. Threat Modeling
• Experience Threat Modeling using industry frameworks and experience evaluating security controls for AI applications and Platforms

Nice to Have

• 1. AWS advanced Certification (Professional, Specialty), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP) or equivalent