Cloud Security Architect
long finch technologiesMableton (GA)
Cloud Security Architect
Posted today
long finch technologiesMableton (GA)
SENIORITY
Lead
About the role
We are seeking an experienced Cloud Security Architect to design, implement, and govern Identity and Access Management (IAM) controls across a large-scale AWS multi-account environment.
Key Responsibilities:
Design, implement, and maintain AWS IAM policies, roles, permission boundaries, and cross-account access controls.
Enforce least-privilege access across AWS accounts and cloud resources.
Secure privileged and non-privileged identities through effective access management and governance practices.
Implement and manage Privileged Access Management (PAM) controls and identity governance processes.
Develop and maintain cloud security standards, policies, and governance frameworks.
Identify and remediate IAM misconfigurations, excessive permissions, and access-related security risks.
Automate security controls, compliance checks, and access reviews using scripting and cloud-native tools.
Monitor cloud security posture and support continuous compliance with enterprise security policies.
Collaborate with cloud engineering, cybersecurity, infrastructure, and compliance teams to implement security best practices.
Support security audits, risk assessments, and regulatory compliance initiatives.
Required Skills and Experience: 1. AWS Identity and Access Management (IAM)
Strong hands-on experience with AWS IAM policies, roles, trust relationships, and permission boundaries.
Experience managing IAM across large-scale AWS multi-account environments.
Understanding of cross-account access, federation, SSO, and least-privilege principles.
Experience identifying and remediating excessive permissions and IAM security risks.
2. Cloud Security Architecture and Governance
Strong understanding of AWS security architecture and cloud security best practices.
Experience implementing cloud security controls, governance policies, and access management standards.
Knowledge of privileged and non-privileged identity security.
Understanding of cloud security posture management and identity governance concepts.
3. Security Compliance and Automation
Experience implementing automated security controls and compliance checks.
Knowledge of cloud security frameworks and standards, such as NIST and CIS benchmarks.
Ability to automate security tasks using scripting or cloud-native tools.
Experience supporting security audits, compliance assessments, and remediation activities.
4. Privileged Access Management (PAM)
Knowledge of PAM solutions, privileged account controls, and secure credential management.
Understanding of identity lifecycle management, access reviews, and governance processes.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.