Security Architect – Amazon Connect

Raval West; Sacramento (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Raval West in Sacramento is seeking a Principal Security Architect to lead security design for an Amazon Connect modernization. You’ll collaborate with architects, developers, and agency security teams to protect claimant information across the agent desktop, backend APIs, call recordings, and deployment pipelines.

Responsibilities include mapping data flows through Amazon Connect, Lambda, API Gateway, and reporting systems, defining encryption and key-management controls, and designing

Qualifications

• 10+ years in cybersecurity or security engineering, including 5+ years in cloud security architecture.
• Experience securing Amazon Connect or a comparable enterprise cloud contact center with hands-on AWS IAM, KMS, API security, secrets management, and CI/CD security.
• Experience in a regulated environment and a CISSP, CCSP, or AWS Certified Security – Specialty credential are preferred.

Responsibilities

• Map how sensitive data moves through Amazon Connect, Lambda, API Gateway, and reporting systems; define encryption, key management, logging, and test data controls.
• Design federated access for agents and supervisors using SAML and role-based access; define least-privilege AWS roles and short-lived credentials.
• Review application and API designs, validate security controls before release, and work with engineering teams to resolve findings.
• Document architecture decisions and remaining risks; update system security plans, privacy impact assessments, and incident-response procedures.

Skills

Cloud security

AWS IAM

KMS

CI/CD security

Access control

Education

CISSP

CCSP

AWS Security – Specialty

Tools

Amazon Connect

API Gateway

Lambda

GitHub Actions

CI/CD tooling

Job description

We are seeking a Principal Security Architect to lead security design for an Amazon Connect modernization. You’ll work with architects, developers, and agency security teams to protect claimant information across the agent desktop, backend APIs, call recordings, and deployment pipelines.

Responsibilities

• Map how sensitive data moves through Amazon Connect, Lambda, API Gateway, and reporting systems. Define controls for encryption, key management, logging, and nonproduction test data.
• Design federated access for agents and supervisors using SAML and role-based access. Define least-privilege AWS roles and short-lived credentials for workloads and GitHub Actions.
• Review application and API designs, validate security controls before release, and work with engineering teams to resolve findings.
• Document architecture decisions and remaining risks. Update system security plans, privacy impact assessments, and incident-response procedures for the new environment.

Qualifications

• 10+ years in cybersecurity or security engineering, including 5+ years in cloud security architecture.
• Experience securing Amazon Connect or a comparable enterprise cloud contact center. Hands-on knowledge of AWS IAM, KMS, API security, secrets management, and CI/CD security is required.
• Experience in a regulated environment and a CISSP, CCSP, or AWS Certified Security – Specialty credential are preferred.