Senior AWS Cloud Security Architect — Build Secure SaaS

Investcloud,-Inc; United States; On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Job summary

InvestCloud is seeking a Cloud Security Architect to own and design the AWS security for our SaaS platform. You will collaborate with developers and infrastructure engineers to secure every layer—from identity to logging across multi-account environments.

You will set baselines for IAM, networking, containers, storage, and encryption, and build guardrails to prevent insecure configurations. Mentoring and strong communication with engineers and executives are essential.

Qualifications

• Typically eight or more years of experience in security engineering or architecture, with at least five focused on hands-on AWS security in multi-account environments.
• Expert knowledge of AWS identity (IAM, AWS Organizations, SCPs, IAM Identity Center).
• Expert knowledge of AWS networking (VPC design, security groups, Network Firewall, WAF).
• Expert knowledge of encryption (KMS, CloudHSM, certificate management).
• Strong container security experience with EKS or ECS (image security, runtime protection, least-privilege identity).
• Experience designing security logging with CloudTrail, VPC Flow Logs, GuardDuty, Security Hub, and a central log platform.
• Experience securing a SaaS platform for regulated customers (financial services)
• Ability to explain complex risk in plain language to engineers and executives

Responsibilities

• Design the security architecture for our AWS environment and collaborate with development and infrastructure teams.
• Set secure baselines for identity, networks, containers, storage, encryption, and logging.
• Design security logging and monitoring across AWS accounts and workloads.
• Review cloud designs and changes and provide practical security guidance.
• Build guardrails and automated checks to stop insecure configurations.
• Collaborate with Application Security Architect to use Wiz for cloud risk in code and runtime.
• Write reference architectures and patterns to enable secure builds.
• Mentor engineers across the company

Skills

AWS security

IAM

VPC design

Container security

Logging & monitoring

Encryption & key management

Terraform/CloudFormation

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

CloudFormation

Wiz

Job description

InvestCloud is seeking a Cloud Security Architect to own and design the AWS security for our SaaS platform. You will collaborate with developers and infrastructure engineers to secure every layer—from identity to logging across multi-account environments.

You will set baselines for IAM, networking, containers, storage, and encryption, and build guardrails to prevent insecure configurations. Mentoring and strong communication with engineers and executives are essential.