JD

Key Responsibilities

AWS Cloud Security Architecture

- Design, implement, and govern AWS security architecture including, but not limited to:
- AWS Organizations ,Control Tower , Secuirty Hub ,IAM Identity Center (AWS SSO)
- IAM Roles & Policies ,SCPs ,Permission Boundaries ,Resource Policies
- Architect secure multi-account AWS environments using AWS Organizations and Landing Zone best practices.
- Working with customers, Solution Engineers and providing them input on AWS resources architecture, price etc.

Network & Infrastructure Security Design secure enterprise network architectures across on-premises and AWS, including but not limited to:

- VPC Architecture, Multi-VPC Networking ,Transit Gateway, VPC Peering, PrivateLink ,Direct Connect ,Site-to-Site VPN, Client VPN, Route Tables, Security Groups , Network ACLs, Internet Gateway , NAT Gateway , Route 53
- Load Balancers (ALB/NLB) ,AWS Network Firewall, AWS WAF , AWS Shield Advanced

Design secure hybrid connectivity between enterprise data centers and AWS while implementing Zero Trust principles and network segmentation. Identity & Access Management

- Design enterprise IAM strategy ,Federation with Active Directory, LDAP and SAML
- MFA implementation ,Cross-account IAM roles ,Temporary credential management ,IAM Access Analyzer ,IAM policy optimization ,Privileged Access Management integration

Security Monitoring & Threat Detection Implement and manage cloud security monitoring solutions including but not limited to:

- AWS Security Hub, GuardDuty, Inspector, Macie , Detective, AWS Config, CloudTrail , VPC Flow Logs, CloudWatch ,Security Incident Response, Threat Hunting , Vulnerability Management

Data Protection & Encryption Design enterprise encryption strategy including:

- AWS KMS ,CloudHSM ,Secrets Manager ,Systems Manager Parameter Store ,SSL/TLS Certificate Management ,ACM ,Encryption at Rest ,Encryption in Transit ,Key Rotation Policies

Compliance & Governance Implement cloud governance aligned with:

- CIS AWS Foundations Benchmark
- ISO 27001




- NIST Cybersecurity Framework
- PCI DSS
- SOC 2
- RBI / Government Security Guidelines (preferred)

Develop security baselines, standards, architecture documentation, risk assessments, and audit evidence. Security Automation & DevSecOps

- Automate security controls using:
- Terraform , CloudFormation, Ansible , Python , Bash
- Implement Infrastructure as Code (IaC) security validation.
- Integrate security into CI/CD pipelines.
- Enable automated compliance and drift detection.

Incident Response & Security Operations

- Lead critical security incidents and forensic investigations.
- Perform Root Cause Analysis (RCA) and recommend preventive controls.
- Develop security runbooks and incident response procedures.
- Coordinate with SOC, Infrastructure, Network, Application, and Customer teams during security incidents.

Leadership & Stakeholder Management

- Act as the AWS Security Subject Matter Expert (SME).
- Mentor L1/L2 engineers and review technical designs.
- Participate in customer security reviews, audits, and architecture discussions.
- Drive security awareness and best practices across engineering teams.
- Create Documentation and SOPs

Preferred Skills

- Kubernetes / Amazon EKS Security
- Docker & Container Security
- SIEM/SOAR platforms (Microsoft Sentinel, Splunk, QRadar, ELK)
- Palo Alto, Fortinet, Check Point, Cisco Firepower
- Zero Trust Architecture
- CNAPP/CSPM/CWPP solutions
- MITRE ATT&CK; Framework
- Threat Modeling

Experience & Qualifications

- 12+ years of experience in Infrastructure, Network, Cloud, or Information Security.
- Minimum 8+ years of hands-on AWS Security experience.
- Experience designing secure hybrid cloud environments.
- Strong understanding of enterprise networking and security architecture.
- Experience in 247 production support environments.

Preferred Certifications

- AWS Certified Security – Specialty
- AWS Solutions Architect – Professional
- AWS Advanced Networking – Specialty
- CISSP ,CCSP ,CISM ,CEH (Positive to Have)
- Palo Alto PCNSE / Fortinet NSE / Cisco Security Certifications (Preferred)

Work Location : Greater Noida

📌 Aws Security Architect (Greater Noida)
🏢 Yotta Infrastructure
📍 Greater Noida