Remote Senior AWS Cloud Security Architect

BairesDev; Peru (IL); On-site; USD 140,000 - 200,000; Full time

Job summary

BairesDev in the United States intent on expanding its cloud security capabilities seeks a Senior Cloud Security Engineer to design and maintain resilient AWS security architectures across multiple accounts, VPCs, and edge services.

You will lead identity governance, configure WAF/CloudFront protections, and guide incident response while balancing security with reliability across networks, infrastructure, and applications. Excellent English required and remote-friendly.

Qualifications

• 7+ years of experience in cloud security engineering.
• Strong AWS security architecture expertise across multiple accounts.
• Hands-on experience configuring WAF, Shield, CloudFront for edge protection.
• Experience leading IAM and identity governance initiatives.
• Strong English communication skills.

Responsibilities

• Design and maintain AWS security architecture across multiple accounts, VPCs, clusters, and edge services.
• Configure and tune AWS edge protection including WAF, WebACLs, Shield, and CloudFront against DDoS, bot traffic, and credential stuffing.
• Continuously assess and optimize network topology, routing, and load balancer configuration for both security and reliability.
• Lead IAM and identity governance initiatives, including least privilege enforcement, role hygiene, and secrets management.
• Participate in and guide cloud incident response, including log analysis, forensics, and remediation planning.
• Troubleshoot and debug issues across network, infrastructure, and application boundaries.

Skills

AWS security architecture

IAM governance

Edge protection (WAF/CloudFront)

Network topology optimization

Incident response & forensics

English proficiency

Least privilege enforcement

Tools

Terraform

CloudFormation

WAF

CloudFront

Job description

BairesDev in the United States intent on expanding its cloud security capabilities seeks a Senior Cloud Security Engineer to design and maintain resilient AWS security architectures across multiple accounts, VPCs, and edge services.

You will lead identity governance, configure WAF/CloudFront protections, and guide incident response while balancing security with reliability across networks, infrastructure, and applications. Excellent English required and remote-friendly.