On-Site AWS Security Architect - Cloud & IAM Expert

System One, Inc.; Knoxville (TN); On-site; USD 120,000 - 180,000; Full time

Job summary

System One, Inc. is seeking an AWS Security Architect to set security requirements for AWS services, IaC, containers, APIs, data, and AI platforms. You will define security patterns and automate policy controls to protect complex environments in a global organization.

The role requires deep AWS security expertise, threat modeling skills, and the ability to translate findings into practical controls for technical teams. On-site Knoxville, US-based, full‑time position.

Qualifications

• Deep experience securing AWS environments (IAM, networking, storage, databases, serverless, containers).
• Strong background in information security architecture, cloud security, and IaC security.
• Hands-on threat modeling using STRIDE, attack trees, data flow, and trust boundary analysis.
• Knowledge of CI/CD and DevSecOps controls, including policy as code like Terraform Sentinel.
• Experience with data security, encryption, key management, access controls, API security.
• Familiarity with security standards (NIST, OWASP, CIS, FedRAMP, ISO, SOX).
• Ability to translate security findings into practical controls for technical teams.

Responsibilities

• Set security requirements for AWS services, Infrastructure as Code, containers, APIs, data, and AI platforms.
• Develop reusable security patterns and automate policy controls using tools such as Terraform Sentinel.

Skills

AWS security

IAM security

Threat modeling

DevSecOps

Policy as code

Encryption

CI/CD security

Data protection

Job description

System One, Inc. is seeking an AWS Security Architect to set security requirements for AWS services, IaC, containers, APIs, data, and AI platforms. You will define security patterns and automate policy controls to protect complex environments in a global organization.

The role requires deep AWS security expertise, threat modeling skills, and the ability to translate findings into practical controls for technical teams. On-site Knoxville, US-based, full‑time position.