Cloud Security Consultant/Architect

The Cloud Security Consultant will be responsible for ensuring the security and compliance of AWS-based systems and infrastructure. They will implement and manage security controls, monitor for threats and vulnerabilities, and respond to security incidents in AWS cloud environments. The Cloud Security Consultant will work closely with cross-functional teams such as the Enterprise architecture and IT Operations teams to establish and maintain a robust AWS cloud security posture.

As an experienced technology professional, you will be expected to:

• Act as the technical leader for customer engagements and/or the security workstreams of engagements, leading teams of consultants.
• Lead internal initiatives to deliver quantifiable impact.
• Develop strategic relationships with internal and external leaders.
• Design and implement complex, scalable, and secure AWS solutions tailored to customer needs.
• Enable and engage delivery partners in project delivery.
• Provide mentorship and coaching to develop others.

Basic Qualifications

• 7+ years of cloud architecture and solution implementation experience.
• 7+ years of hands-on security experience in two or more of the following:
  • Cloud Security
  • Application Security (security SDLC, threat modeling, code review)
  • Identity & Access Management
  • Network Security
  • Data Protection
  • Incident Response
• Hands on experience implementing enterprise security solutions (Data Loss Prevention, WAF, SIEM, etc.).

Preferred Qualifications

• Knowledge of security and compliance standards including HIPAA and GDPR.
• Experience communicating technical concepts to diverse audiences in pre-sales environments.
• AWS experience preferred, with proficiency in a wide range of AWS services (e.g. EC2, S3, RDS, Lambda, IAM, VPC, CloudFormation).
• AWS Professional level certifications (e.g. Solutions Architect Professional, DevOps Engineer Professional) preferred.
• Experience with automation and scripting (e.g. Terraform, Python).
• Hands-on technical expertise in building security capabilities in code, deploying infrastructure as code, and implementing enterprise security solutions (e.g. WAF, IPS, Anti-DDOS, SIEM).