Job description

Primary Responsibilities • Oversee for the development and design of a robust and scalable cloud-based platform. • Serves as a Subject Matter Expert for the cloud computing environment. • Implements and oversees the cloud strategy for the organization. • Designs and leads multi-functional initiatives to manage systemic security risks within the environment, which includes designing or enhancing security solutions that address these problems, while influencing the process, policy, and architecture of these solutions. • Acts as a mentor and guide to a growing team of capable principals and leads who are also beginning to tackle these challenges within the cloud-based infrastructure. • Focuses primarily on services within the AWS cloud, managing the configuration, resources, performance, security, and reliability of the AWS-based cloud infrastructure, as well as the interoperability with Microsoft-based on-premises systems. Knowledge & Requirements • A minimum of 5 years of experience architecting AWS-based cloud infrastructure within a multi-account structure. • Provide subject matter expertise for executing and overseeing cloud computing strategies. • Develop and coordinate cloud architecture across diverse areas including application development, network and data management, identity and access management, and security operations. • Assess risks and weaknesses and identify design or implementation gaps in existing architecture. • Create Terraform scripts for resource provisioning. • Analyze threats detected by threat intelligence systems and provide direction on remediation efforts. • Perform security monitoring, including log aggregation/centralization, correlation and alerting of security events. • Provide oversight, guidance, and support of security-related initiatives such as IAM and encryption. • Experience in cloud networking architectures and cloud operations with cloud access security broker (CASB). • A solid understanding of Microsoft server infrastructure and virtualization technologies. • Experience with other cloud providers such as Azure and Google. • Containers - ECS, EKS, Fargate, and other container-based services. • IAM – IAM policies, roles, SAML federation, cross-account access, instance profiles, and service linked roles • Security-related services – Security Hub, GuardDuty, Macie, Inspector, AWS WAF, etc. • Transport services – Direct Connect, Transit Gateway, Transit VPC, VPN, Peering #HO

Requirements