Principal AWS Security Architect

Go2Group LLC; Ohio; Hybrid; USD 180,000 - 200,000; Full time

Job summary

Go2Group LLC seeks an experienced Principal AWS Security Architect to own cloud and application security across a healthcare technology stack. This is a true architecture-focused role emphasizing design, guidance, and advisory work rather than hands-on coding.

You will establish security guardrails, review products, strengthen IAM, and partner with engineering to embed security into development. Collaboration with the CISO is expected.

Qualifications

• 7+ years of engineering experience, including 5+ years in security engineering or architecture.
• Deep AWS security architecture expertise and experience establishing cloud security controls and design standards.
• Strong DevSecOps background, including secure SDLC, CI/CD, and IaC security.
• Substantial IAM experience, owning enterprise identity architecture, governance, authentication, and authorization strategies.
• Working knowledge of application/API security, cloud-native architectures, and vulnerability management.
• Prior hands-on engineering experience with the ability to provide credible architectural guidance to development teams.
• Strong communication skills, sound risk judgment, and the ability to operate independently in a collaborative environment.

Responsibilities

• Design and guide AWS cloud security architecture, guardrails, controls, and reusable security patterns.
• Drive DevSecOps, integrating security into CI/CD pipelines, Terraform, and software development practices.
• Lead IAM architecture and governance, including authentication, authorization, least privilege, federation, and access controls.
• Conduct security architecture reviews of new applications, APIs, products, and cloud deployments.
• Evaluate application security, vulnerabilities, and cloud risks, providing practical mitigation strategies.
• Advise engineering and product teams on secure adoption of emerging technologies, including Claude Code and Amazon Bedrock.
• Partner with CISO, IT, and engineering leadership to translate security risks into business decisions.

Skills

AWS security architecture

DevSecOps

IAM governance

CI/CD security

Application security

Cloud-native security

Security reviews

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Veracode

OX Security

Amazon Bedrock

Claude Code

AWS IAM Identity Center

SAML/OIDC

Job description

Direct applicants only — no third-party agencies, please.

Please note: LinkedIn does not offer a contract-to-hire employment type. Our client is open to both direct-hire full-time and contract-to-hire arrangements, depending on candidate qualifications, availability, and hiring timelines.

Our client is an established healthcare technology company connecting pharmacies, healthcare payers, pharmaceutical manufacturers, and patients through innovative software and clinical solutions. With more than 46 years of industry experience, its technology supports approximately 48,000 pharmacies and over 70 million patients nationwide.

This is an opportunity to join a highly collaborative security organization, report directly to the CISO, and take ownership of security architecture across a predominantly AWS environment. You'll help shape how cloud applications, products, and infrastructure are securely designed, while supporting the company's continued investment in modern cloud and AI technologies.

Quick Overview

• Location: Orlando, FL; Overland Park (Kansas City), KS; or Dublin (Columbus), OH
• Work Model: Hybrid — Monday, Tuesday, Thursday onsite; Wednesday and Friday remote
• Employment: Full-time direct hire or potentially contract-to-hire
• Base Salary: $180-$200K, with flexibility for up to $215k exceptional candidates
• Annual Bonus: 20% target
• Reporting To: CISO
• Travel: Occasional, for team meetings and company events
• Work Authorization: Must be authorized to work in the U.S. without sponsorship

The Role

We're seeking a Principal AWS Security Architect to own and advance cloud and application security architecture within a complex healthcare technology environment.

This is a true architecture-focused position (approximately 90% design, guidance, and advisory work) rather than a hands-on engineering or coding role. You'll establish security guardrails, review new products and applications, strengthen IAM controls, and partner with engineering teams to embed security into their development processes.

The ideal candidate has deep AWS expertise, a strong engineering foundation, and the ability to balance security risk with business priorities without unnecessarily slowing innovation.

What You’ll Do

• Design and guide AWS cloud security architecture, guardrails, controls, and reusable security patterns.
• Drive DevSecOps, integrating security into CI/CD pipelines, infrastructure-as-code (Terraform), and software development practices.
• Lead IAM architecture and governance, including authentication, authorization, least privilege, federation, and access controls.
• Conduct security architecture reviews of new applications, APIs, products, and cloud deployments.
• Evaluate application security, vulnerabilities, and cloud risks, providing practical recommendations and mitigation strategies.
• Advise engineering and product teams on secure adoption of emerging technologies, including Claude Code and Amazon Bedrock.
• Partner directly with the CISO, IT, and engineering leadership, translating technical security risks into actionable business decisions.

What You Bring

• 7+ years of engineering experience, including 5+ years in security engineering or architecture.
• Deep AWS security architecture expertise and experience establishing cloud security controls and design standards.
• Strong DevSecOps background, including secure SDLC, CI/CD, and infrastructure-as-code security.
• Substantial IAM experience, ideally owning enterprise identity architecture, governance, authentication, and authorization strategies.
• Working knowledge of application/API security, cloud-native architectures, and vulnerability management.
• Prior hands-on engineering experience with the ability to provide credible architectural guidance to development teams.
• Strong communication skills, sound risk judgment, and the ability to operate independently in a collaborative environment.

Preferred

• Healthcare technology, SaaS, or regulated industry experience, including HIPAA/PHI security.
• Advanced AWS IAM expertise (SCPs, IAM Identity Center, permission boundaries, SAML/OIDC, SSO).
• Experience with Amazon Bedrock, Claude Code, or AI application security.
• Familiarity with Terraform, OX Security, Veracode, or similar application security tooling.
• Certifications such as CISSP, CCSP, CISM, or AWS Certified Security – Specialty.

Why Consider This Opportunity?

• High-impact architecture ownership with direct visibility to the CISO.
• Modern AWS-first environment with investments in DevSecOps, cloud-native technologies, and AI.
• Meaningful autonomy to influence security strategy and engineering decisions.
• Healthcare impact supporting technology used across tens of thousands of pharmacies and millions of patients.
• Competitive compensation and benefits, including a 20% target bonus, medical/dental/vision coverage, 401(k) with company matching provisions, and flexible PTO for eligible full-time employees.

If you're an experienced AWS security architect with strong DevSecOps and IAM expertise who enjoys designing practical security solutions and influencing engineering teams, we'd love to connect.