JD:

Key Responsibilities

AWS Cloud Security Architecture
Design, implement, and govern AWS security architecture including, but not limited to:
AWS Organizations ,Control Tower , Secuirty Hub ,IAM Identity Center (AWS SSO)
IAM Roles & Policies ,SCPs ,Permission Boundaries ,Resource Policies
Architect secure multi-account AWS settings using AWS Organizations and Landing Zone best practices.
Working with customers, Solution Engineers and providing them input on AWS resources architecture, price etc.

Network & Infrastructure Security

Design secure enterprise network architectures across on-premises and AWS, including but not limited to:
VPC Architecture, Multi-VPC Networking ,Transit Gateway, VPC Peering, PrivateLink ,Direct Connect ,Site-to-Site VPN, Client VPN, Route Tables, Security Groups , Network ACLs, Internet Gateway , NAT Gateway , Route 53
Load Balancers (ALB/NLB) ,AWS Network Firewall, AWS WAF , AWS Shield Advanced

Design secure hybrid connectivity between enterprise data centers and AWS while implementing Zero Trust principles and network segmentation.





Identity & Access Management
Design enterprise IAM strategy ,Federation with Active Directory, LDAP and SAML
MFA implementation ,Cross-account IAM roles ,Temporary credential management ,IAM Access Analyzer ,IAM policy optimization ,Privileged Access Management integration

Security Monitoring & Threat Detection

Implement and manage cloud security monitoring solutions including but not limited to:
AWS Security Hub, GuardDuty, Inspector, Macie , Detective, AWS Config, CloudTrail , VPC Flow Logs, CloudWatch ,Security Incident Response, Threat Hunting , Vulnerability Management

Data Protection & Encryption

Design enterprise encryption strategy including:
AWS KMS ,CloudHSM ,Secrets Manager ,Systems Manager Parameter Store ,SSL/TLS Certificate Management ,ACM ,Encryption at Rest ,Encryption in Transit ,Key Rotation Policies

Compliance & Governance

Implement cloud governance ali

📌 Aws Security Architect Delhi
🏢 Yotta Infrastructure
📍 Delhi