Senior Cloud Architect: Automation-Driven IaC & Security

Kastech Software Solutions Group; United States; On-site; USD 140,000 - 210,000; Full time

Job summary

Kastech Software Solutions Group seeks an Expert Cloud Architect to lead architecture, IaC development with Terraform, and security automation across enterprise cloud platforms. You will build scalable landing zones in AWS/Azure, design multi-stage CI/CD pipelines, and integrate security workflows with tools like Tenable and Infoblox.

You will also guide Kubernetes-based agents and Bedrock integration, ensuring zero-trust practices and policy-as-code enforcement throughout deployment pipelines.

Qualifications

• 8+ years of hands-on cloud infrastructure experience.
• Deep expertise in AWS or Azure.
• 5+ years Terraform at scale and multi-environment state management.
• 4+ years designing CI/CD pipelines in Azure DevOps or GitHub Actions.
• Experience integrating security tools into automated cloud workflows.

Responsibilities

• Own and evolve enterprise landing zone architectures (AWS/Azure).
• Design and implement multi-stage CI/CD pipelines with policy-as-code enforcement.
• Develop Terraform module libraries with secure defaults and modular design.
• Architect automated vulnerability and threat path mappings using Tenable/Infoblox data.
• Integrate security tooling into deployment pipelines (SCPs, IAM policies).
• Provide technical leadership and ADRs across engineering squads.

Skills

Python Programming

Terraform

CI/CD

Cloud Architecture

Kubernetes

Security Integration

Education

Bachelor’s degree in Computer Science, Information Technology, or equivalent industry experience

Tools

Tenable

Infoblox

Palo Alto firewalls

Job description

Kastech Software Solutions Group seeks an Expert Cloud Architect to lead architecture, IaC development with Terraform, and security automation across enterprise cloud platforms. You will build scalable landing zones in AWS/Azure, design multi-stage CI/CD pipelines, and integrate security workflows with tools like Tenable and Infoblox.

You will also guide Kubernetes-based agents and Bedrock integration, ensuring zero-trust practices and policy-as-code enforcement throughout deployment pipelines.