Senior cloud architect (platform architecture)

Job Title: Senior Cloud Security Architect Location: Washington, DC / Remote. Deep expertise across primarily AWS and some Azure, networking, identity, security, and Infrastructure as CodeExperience influencing engineering, security, platform, and executive stakeholdersQuality is more important than quantity. Must possess at least 7 years of IT experience with broad knowledge and an understanding of IT areas such as: Architecture, Infrastructure setup, management, Operating Systems, Database, various types of Applications, Network, and Cloud implementations.

• Must possess at least 5+ years of strong hands-on experience in Cloud infrastructure and applications
• Strong understanding of cloud infrastructure components (server, storage, network, security, data, and applications) to deliver end to end AWS cloud Infrastructure solutions.
• Design and implement secure cloud architectures aligned with security best practices.
• Define cloud security standards, governance frameworks, and security guardrails.
• Lead security architecture reviews for cloud infrastructure and applications.
• Develop and maintain AWS landing zones, multi-account strategies, and security baselines.
• Architect identity and access management solutions using AWS IAM, IAM Identity Center, and least-privilege principles.
• Design and implement network security controls including VPC architecture, segmentation, private connectivity, WAF, and security groups.
• Lead cloud threat modeling, risk assessments, and security reviews.
• Drive cloud security automation using Infrastructure as Code (Terraform, CloudFormation).
• Oversee vulnerability management, cloud posture management, and remediation efforts.
• Mentor junior cloud security engineers and provide technical guidance.
• Support regulatory compliance initiatives (NIST, CIS, ISO 27001, SOC 2, PCI, HIPAA as applicable).
• Partner with development, infrastructure, and security operations teams to implement DevSecOps controls.
• Deep expertise in AWS security services like IAM, Control Tower, Security Hub, Guard Duty, Config, CloudTrail, KMS, Secrets Manager etc....,
• Strong understanding of Zero Trust and cloud security architecture principles.
• Experience designing secure multi-account AWS environments.
• Expertise in cloud networking and security architecture.
• Strong scripting and automation skills (Python, PowerShell, Bash).
• Experience integrating AWS/Azure security controls with SIEM platforms like Microsoft Sentinel. ·