Cyber ​​Architect

abra • Wheaton, IL

11h

About The Position

abra professional services is seeking an experienced AWS Cloud Security Architect to lead the security and infrastructure architecture of enterprise AWS environments, from Landing Zone design through workload implementation. The role focuses on designing secure cloud environments, defining governance and security controls, and implementing security practices across infrastructure, applications, and delivery processes.

The architect will develop AWS Landing Zones and multi-account environments; establish cloud security architecture, governance, IAM policies, and least-privilege access; and design monitoring, detection, and secure networking solutions using AWS services. The position also includes threat modeling, secure CI/CD and Infrastructure as Code processes, DevSecOps and application security controls, evaluation of advanced security solutions, and preparation of detailed high-level and low-level architecture documentation.

Requirements

• Bachelor’s degree in Computer Science, Software Engineering, Computer Engineering, Electronics Engineering, Exact Sciences, or a related field; alternatively, a relevant academic degree combined with 400+ hours of professional cybersecurity training or certifications.
• At least 4 years of recent experience in AWS Cloud Security and Infrastructure.
• Strong experience with AWS security architecture, including IAM, Control Tower, SCPs, CloudTrail, GuardDuty, Security Hub, Config, and WAF.
• Experience designing secure AWS multi-account and network architectures, including Transit Gateway and hybrid connectivity.
• Proven experience in Cloud Threat Modeling and defining security controls.
• Hands-on experience with Infrastructure as Code (CloudFormation) and AWS security services.
• Experience creating HLD and LLD architecture documents.

Nice To Haves

• Relevant technological military or service background may be considered, subject to the required qualifications.

Responsibilities

• Design and implement secure AWS Landing Zones and multi-account environments.
• Define cloud security architecture, governance, IAM policies, and least-privilege access controls.
• Design security monitoring and detection solutions using AWS CloudTrail, GuardDuty, Security Hub, Config, and WAF.
• Design secure network architectures using Transit Gateway, CloudFront, ALB/NLB, API Gateway, PrivateLink, Route 53, and Firewall Manager.
• Perform threat modeling and define security controls for cloud environments.
• Design secure CI/CD and Infrastructure as Code (IaC) processes.
• Define and implement DevSecOps practices and application security controls.
• Evaluate advanced security solutions such as CSPM, CNAPP, CASB, SASE, and ZTNA.
• Create detailed cloud and security architecture documentation, including HLD and LLD.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior