Cloud Infrastructure, Security Architect

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Supervise the monitoring, maintenance, and configuration of various AWS-based systems and infrastructure.

• Partner with Huron industry experts to develop new systems and maintain current ones.

• Oversee applications, documentation, and standard operating procedures.

• Set up AWS services with an emphasis on security and the integration of external firewalls.

• Provide support for both Linux and Windows environments within AWS.

• Install, configure, deploy, upgrade, and troubleshoot software and applications.

• Automate deployment processes effectively.

• Configure and execute cloud-security remediation actions.

• Investigate emerging technologies and deliver solutions that meet business needs.

• Collaborate with vendors and IT professionals to address issues.

• Develop firewall rules, troubleshoot firewall problems, and conduct peer reviews of firewall changes.

• Manage Huron’s AWS Organization, which consists of over 100 sub-accounts through custom automation, Directory Services, IAM policies, AWS SSO, and SCPs.

• Administer multiple domains using Active Directory, Group Policy implementation, and scheduled tasks.

• Establish secure connectivity through Palo Alto and ASA firewalls, access lists, and site-to-site VPNs.

• Ensure connectivity between cloud and on-premises environments via site-to-site VPNs and Direct Connect.

• Oversee cross-account connectivity among network segments.

• Create and implement cloud-security policies, procedures, and controls.

• Mentor and train fellow engineers on best practices in architecture and problem-solving.

⛳️ Requirements

• Over 3 years of hands-on experience with Amazon Web Services, including EC2, VPC, S3, EBS, IAM, RDS, and CloudWatch.

• Experience in designing and architecting serverless web applications utilizing AWS Lambda and API Gateway.

• Knowledge in architecting backup/restore and disaster recovery solutions for AWS workloads and databases.

• Proficiency with AWS CLI, Python, and PowerShell scripting.

• Familiarity with Well-Architected Redshift, RDS, EC2 instances, and Application Load Balancers.

• Experience in cloud network architecture, including VPN tunnels, VPC peering, and VPCs across various AWS accounts.

• Skilled in using and maintaining S3, EBS, EFS, SES, and SQS.

• Experience utilizing Lambda and CloudFormation to implement organization-wide policies and security measures.

• Knowledge in architecting AWS networking setups using VPC solutions, security groups, RAM, Direct Connect, and site-to-site VPN.

• Familiarity with SIEM tools such as Sumo Logic.

• Understanding of fundamental architectural principles for building on AWS Cloud.

• AWS Certified Solutions Architect and/or AWS Certified Security Specialty certification.

• Experience in migrating on-premises applications and infrastructure to cloud environments.

• Proven track record in designing and implementing secure cloud solutions in public, private, or hybrid cloud settings.

• Strong grasp of cloud-computing concepts, architectures, and technologies, including AWS, Azure, and Google Cloud.

• Proficient in cloud-security best practices, encryption techniques, IAM, and network security.

• More than 3 years of experience with Palo Alto and firewall technologies.

🏝️ Benefits

• Medical, dental, and vision coverage for employees and their dependents.

• Wellness programs available.

• 401(k) plan with a generous employer match.

• Employee stock purchase plan offered.

• Paid Time Off policy in place.

• Paid parental leave is provided.

• Adoption assistance available.

• Free annual health screenings and coaching provided.

• Bank at work initiative.

• On-site workshops offered.

• Continuous programs recognizing significant events in employees’ lives.

• Annual incentive compensation program implemented.