AWS Cloud Security Architect

Job not on LinkedIn

🔥 3 minutes ago

⚜️ Louisiana – Remote

⚜️ Louisiana – Remote

💵 $169.6k - $229.5k / year

⏰ Full Time

🟠 Senior

🔴 Lead

☁️ Cloud Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

LouisianaNOW.Jobs

WebsiteLinkedInAll Job Openings

51 - 200 employees

🎯 Recruiter

🏪 Marketplace

Recruitment • Marketplace

LouisianaNOW. Jobs is a regional jobs portal and talent attraction site focused on connecting job seekers to employers and economic opportunities across Louisiana. The site highlights regional communities, industry sectors, current employers who are hiring, career advice articles, and job listings, and appears to be operated or supported by LED FastStart (Louisiana Economic Development). It’s positioned as a marketplace that promotes Louisiana’s growing industries and helps match talent with local openings and employer investment announcements.

📋 Description

• Build and support modernization of enterprise-class software applications as part of an agile development team • Provide cloud security subject matter expertise for IaaS, PaaS, and SaaS security design and architecture • Design and implement security measures protecting data moving from on-premises data centers to cloud storage • Provide expert advisory services for secure design and deployment of cloud-based systems • Apply secure-by-design principles including access control, encryption, and identity management • Conduct threat and vulnerability assessments and monitor risks • Ensure compliance with federal cybersecurity standards and Judiciary frameworks • Design secure cloud architectures • Perform risk assessments using enterprise tools • Coordinate with ITSO and CISA on independent security evaluations • Create System Security Plans, Business Continuity Analyses, and Disaster Recovery Plans • Deliver a quarterly Cloud Security Roadmap • Provide operational support for cloud firewalls, ACLs, SSL, API endpoints, authentication, private image management, and secure network segmentation • Support incident response planning and legacy-system automation • Document cybersecurity control artifacts • Ensure continuous monitoring and secure data handling • Engage in proactive risk mitigation • Strengthen security posture across production and non-production cloud environments within the CMSO ecosystem

🎯 Requirements

• Technical training, certification(s), or degree required • 10+ years of general information systems experience required • Deep expertise in Amazon EKS security architecture, pod identity, namespace isolation, and node-group separation • Expert Kubernetes RBAC design and auditing • Strong Kubernetes NetworkPolicy expertise • Expert Pod Security Admission and Gatekeeper policy-as-code controls • Experience with container image security, Amazon ECR, Inspector Enhanced Scanning, cosign, and SBOM generation • Expert GitLab CI/CD pipeline security, OIDC-based AWS authentication, scanning integration, and immutable artifact promotion • Experience with container performance monitoring using New Relic or equivalent tools • Experience designing FedRAMP High multi-tier web applications on EKS • Expert AWS VPC architecture, Transit Gateway, and EKS hardening • Deep experience with security groups, Network ACLs, AWS Network Firewall, domain allowlists, and egress controls • Expert VPC endpoint design • Expert AWS WAF • Deep expertise in API Gateway security, private endpoints, JWT authorizers, resource policies, and mTLS • Experience with AWS Direct Connect, Site-to-Site VPN, BGP route security, and hybrid connectivity hardening • Expert VPC Flow Log analysis using CloudWatch Logs Insights, Athena, and Splunk SPL • Expert CloudWatch multi-account architecture and centralized log aggregation • Experience integrating CloudTrail, GuardDuty, Security Hub, and Config across AWS Organizations with EventBridge response • Expert Splunk integration and correlation searches • Expert multi-layer vulnerability management for containerized AWS workloads • Experience with Trivy, Grype, Syft, and kube-bench • Proficiency with AWS Inspector, Security Hub, Systems Manager Patch Manager, and Config conformance packs • Experience with enterprise vulnerability-management platforms in federal environments • Expert runtime threat detection using GuardDuty EKS Runtime Monitoring • Ability to design and measure vulnerability-management effectiveness metrics • Expert IAM least privilege using SCPs, permission boundaries, condition keys, and IAM Access Analyzer • Demonstrated FedRAMP High ATO leadership, SSP authoring, NIST 800-53 Rev. 5 controls, POA&M management, 3PAO support, and continuous monitoring • Ability to pass a background check to obtain and maintain Public Trust with the Administrative Office of the US Courts • Must be a US Person: Green Card Holder, US Permanent Resident Alien, Refugee, Asylee, or US Citizen • Preferred certifications: AWS Certified Security – Specialty, Certified Kubernetes Security Specialist, and AWS Certified Solutions Architect – Professional

🏖️ Benefits

• Comprehensive medical plan options, some with Health Savings Accounts • Dental plan options • Vision plan options • 401(k) plan with pre-tax and post-tax contributions and company match • Full flex work weeks where possible • Vacation, sick, and personal time • Paid holidays • Paid parental leave • Military leave • Bereavement leave • Jury duty leave • 15 days of paid leave per calendar year for new employees • 10 paid holidays per year • Paid Family Leave of up to 160 hours in a rolling 12-month period for eligible employees • Short- and long-term disability benefits • Life insurance • Accidental death and dismemberment insurance • Personal accident insurance • Critical illness insurance • Business travel and accident insurance • AI-powered career tool identifying career steps and learning opportunities • Internal mobility team supporting career goals • Career growth opportunities • Wellness packages • Award-winning culture of innovation • Military-friendly workplace • Competitive pay