AWS Security Architect

Contract -1 Year

Remote

Shift -CST / PST

Apply [email protected]

Okay to use own laptop

Strong experience designing secure enterprise AWS architectures using Zero Trust, defense-in-depth, and threat modeling.
- Deep expertise in IAM policies, roles, federation, Identity Center, STS, MFA, permission boundaries, and least privilege.
- Experience with AWS Organizations, OUs, SCPs, Control Tower, delegated administration, account isolation, and governance guardrails.
- Robust knowledge of VPC, subnet segmentation, SG/NACL, Transit Gateway, PrivateLink, VPC endpoints, Network Firewall, WAF, and Shield.
- Expertise in KMS, key policies, encryption, Secrets Manager, ACM, S3 security, Macie, and data classification.




- Hands-on experience with CloudTrail, GuardDuty, Security Hub, Config, Detective, Security Lake, CloudWatch, and centralized logging.
- Experience handling security incidents, investigation, containment, automated remediation, forensics, isolation, and response playbooks.
- Knowledge of SAST/DAST, dependency scanning, container security, CI/CD security, secrets scanning, and IaC security.
- Experience supporting PCI DSS, HIPAA, SOC 2, ISO 27001, risk assessments, control mapping, and compliance evidence.

📌 Aws Architect (Pune)
🏢 InterSources
📍 Pune