Note: The job is a remote job and is open to candidates in USA. Mindlance is seeking an experienced Cloud Security Architect to lead the design and implementation of secure cloud infrastructure across AWS-based environments. This role will focus on securing network boundaries, containerized workloads, and overall cloud infrastructure components, ensuring compliance with best practices and regulatory requirements.
Responsibilities
- Designs and maintains secure architectures for cloud infrastructure in AWS, AliCloud, and any cloud Client operates in, defining security reference architectures and guardrails for services like VPC, subnets, security groups, and IAM roles
- Implements and validates network segmentation, ingress/egress controls, and virtual firewall configurations for cloud infrastructure components (EC2, ALB/NLB, Route 53, VPCs, Transit Gateways)
- Secures containerized workloads in Amazon EKS or self-managed Kubernetes clusters, defining security controls including RBAC, network policies, pod security standards, and image scanning
- Collaborates with DevOps and platform teams to integrate security into CI/CD pipelines and container registries
- Ensures secure configuration of cloud-native storage solutions (S3, EBS, EFS), implementing encryption, logging, access control, and data classification
- Evaluates and enforces policies around public access, bucket-level permissions, and data loss prevention for cloud-stored data
- Ensures cloud solutions comply with internal policies and external regulatory requirements (ISO 27001, SOC 2, HIPAA, GDPR)
- Contributes to threat modeling, risk assessments, and architecture review processes for new and existing workloads
- Defines and implements logging and monitoring strategies using CloudTrail, GuardDuty, Security Hub, and container-level telemetry
- Collaborates with Security Operations and Incident Response teams on alerts and forensic readiness
- Conducts security and privacy technology research, assessments, and integration processes; provides and supports prototype capabilities
- Consults with customers to gather and evaluate functional requirements and provides security and privacy requirements, guidelines, and standards
- Provides sound advice and recommendations to leadership and staff on cloud security topics, translating technical security risks into business impact
- Manages and measures information security implications within the organization, including strategic planning, risk management, and security awareness
Skills
- Bachelor's or Master's degree in Computer Science, Information Security, or related field, or equivalent professional experience
- 7+ years of experience in cybersecurity with at least 3+ years focused on cloud security in AWS
- Hands-on expertise in AWS services (VPC, EC2, EKS, S3, IAM, CloudTrail, KMS, GuardDuty), Kubernetes security, and Infrastructure-as-Code security (Terraform)
- Cloud Security Certifications: AWS Certified Security – Specialty, AWS Certified Solutions Architect, Certified Kubernetes Security Specialist (CKS), CISSP, or GCSA
- Multi-Cloud Security Experience: Experience securing workloads across AWS, Azure, and GCP with understanding of platform-specific security implications
- Zero Trust Architecture: Familiarity with Zero Trust principles, identity-aware access policies, micro segmentation strategies, and secure service-to-service communication
Company Overview
Company H1B Sponsorship