Senior Cloud Security Architect

Idexcel; Washington (District of Columbia); Hybrid; USD 170,000 - 230,000; Full time

Job summary

Idexcel in Washington, DC / Remote is seeking a Senior Cloud Security Architect to design and implement secure, scalable AWS-based cloud architectures. The role requires deep AWS expertise with some Azure, strong governance, and experience delivering enterprise standards and reference architectures.

You will lead security reviews, build landing zones, IAM, network security, DevSecOps integration, and mentor engineers in a regulated environment.

Qualifications

• At least 7 years IT experience across architecture, infra, OS, databases, networks and cloud.
• Minimum 5+ years hands-on cloud infrastructure and applications.
• Expert in AWS security services and landing zones; experience with multi-account strategies.
• Design secure cloud architectures and governance frameworks.
• Lead security architecture reviews and threat modeling for cloud infra.
• Drive IaC automation with Terraform/CloudFormation; implement least-privilege IAM.
• Support regulatory compliance (NIST, CIS, SOC 2, ISO 27001, PCI, HIPAA as applicable).
• Mentor engineers; partner with dev, infra, and security teams for DevSecOps.
• Strong communication and ability to interact with CTOs and ARB.

Responsibilities

• Architect security for cloud infrastructure and applications.
• Develop AWS landing zones, multi-account strategies, and security baselines.
• Define cloud security standards and governance frameworks.
• Lead cloud security architecture reviews for infrastructure and apps.
• Implement IAM, network controls, VPC design, segmentation, and WAF configurations.
• Lead cloud threat modeling, risk assessments, and security reviews.
• Automate security with Infrastructure as Code (Terraform, CloudFormation).
• Oversee vulnerability management and cloud posture remediation.
• Mentor junior cloud security engineers and collaborate with DevSecOps teams.
• Ensure regulatory compliance initiatives and security alignment with stakeholders.

Skills

AWS expertise

Azure familiarity

Networking

Identity management

Infrastructure as Code

Governance & standards

Executive stakeholder influence

Executive communication

Cloud security architecture

Security tooling & cloud security

Tools

Terraform

CloudFormation

AWS IAM

KMS / Secrets Manager

Security Hub / GuardDuty

VPC / Networking

CI/CD tooling

Microsoft Sentinel

Job description

Job Title: Senior Cloud Security Architect

Location: Washington, DC / Remote

The successful candidate must demonstrate

• Deep expertise across primarily AWS and some Azure, networking, identity, security, and Infrastructure as Code
• A history of defining enterprise standards, reference architectures, roadmaps, and governance
• Strong infrastructure engineering credentials prior to moving into architecture
• Experience influencing engineering, security, platform, and executive stakeholders
• Success operating in large, complex, regulated environments
• Exceptional communication and executive presence

Please submit only candidates you would confidently place in front of a CTO, Chief Architect, or Architecture Review Board.

Quality is more important than quantity. I would rather review one exceptional candidate than ten marginal fits.

Minimum Qualifications

• Must possess at least 7 years of IT experience with broad knowledge and an understanding of IT areas such as: Architecture, Infrastructure setup, management, Operating Systems, Database, various types of Applications, Network, and Cloud implementations.
• Must possess at least 5+ years of strong hands‑on experience in Cloud infrastructure and applications
• Strong understanding of cloud infrastructure components (server, storage, network, security, data, and applications) to deliver end to end AWS cloud Infrastructure solutions.
• Design and implement secure cloud architectures aligned with security best practices.
• Define cloud security standards, governance frameworks, and security guardrails.
• Lead security architecture reviews for cloud infrastructure and applications.
• Develop and maintain AWS landing zones, multi-account strategies, and security baselines.
• Architect identity and access management solutions using AWS IAM, IAM Identity Center, and least‑privilege principles.
• Design and implement network security controls including VPC architecture, segmentation, private connectivity, WAF, and security groups.
• Lead cloud threat modeling, risk assessments, and security reviews.
• Drive cloud security automation using Infrastructure as Code (Terraform, CloudFormation).
• Oversee vulnerability management, cloud posture management, and remediation efforts.
• Mentor junior cloud security engineers and provide technical guidance.
• Support regulatory compliance initiatives (NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA as applicable).
• Partner with development, infrastructure, and security operations teams to implement DevSecOps controls.
• Deep expertise in AWS security services like IAM, Control Tower, Security Hub, Guard Duty, Config, CloudTrail, KMS, Secrets Manager etc.…,
• Strong understanding of Zero Trust and cloud security architecture principles.
• Expertise in cloud networking and security architecture.
• Strong scripting and automation skills (Python, PowerShell, Bash).
• Experience with Infrastructure as Code.
• Knowledge of container (ECS) and Kubernetes security (EKS).
• Experience integrating AWS/Azure security controls with SIEM platforms like Microsoft Sentinel.
• Take ownership of issues, with a sense of urgency, and using sound judgement to resolve within service levels.
• Ability to work independently as well as work well with others in an integrated team environment and must be self‑motivated.
• Must possess strong communication and interpersonal skills, work well with others in an integrated team environment, and must be self‑motivated.