Security & Infrastructure Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Establish secure configurations across AWS and Azure, covering identity and access management, network boundaries, encryption, logging, secrets management, and workload protection.

• Assess cloud environments against security benchmarks and prioritize identified issues.

• Convert assessment findings into specific, actionable technical tasks.

• Collaborate with DPRE and SRE to integrate security configurations into cloud services and infrastructure as code.

• Evaluate cloud architecture and infrastructure-as-code modifications for their security implications.

• Keep cloud security standards up-to-date as AWS, Azure, and the company’s footprint change.

• Establish and uphold hardened configuration baselines for operating systems, cloud services, and infrastructure.

• Create mappings for scan and monitoring coverage in relation to authorization boundaries.

• Develop architectural standards and reusable reference patterns.

• Assess infrastructure, platform, and integration designs against architectural standards.

• Maintain up-to-date architecture documentation across cloud, identity, endpoints, SaaS, network, and integrations.

• Convert security requirements into technical design and configuration instructions.

• Ensure compliance with architectural documentation and technical specifications for System Security Plans and audits.

⛳️ Requirements

• A minimum of five years of experience in cloud, infrastructure, systems engineering, or security engineering.

• At least three of those years in roles focused on architecture, senior engineering, or technical design and standards.

• Profound knowledge in AWS or Azure security configuration, along with a working understanding of the other platform.

• Experience in reviewing or creating infrastructure as code, particularly with Terraform.

• Familiarity with cloud security posture tools and the ability to differentiate significant findings from minor issues.

• Hands-on experience applying hardened configuration baselines using DISA STIGs, CIS Benchmarks, or equivalent standards.

• Understanding of how continuous monitoring functions under FedRAMP or GovRAMP.

• Comfortable automating configuration checks and evidence gathering.

• Proficient in Microsoft 365, Entra ID, Active Directory, Okta, MDM and UEM tools, EDR, and SIEM.

• Proven history of producing technical documentation, including diagrams, standards, decision records, and design reviews.

• Familiarity with compliance frameworks such as GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001.

• Ability to influence technical decisions without direct ownership and discern when escalation is necessary.

• Demonstrated capability to utilize AI tools to enhance productivity, decision-making, and work quality.

• Must possess authorization to work in the US.

• Visa sponsorship is not available now or in the future.

🏝️ Benefits

• Comprehensive health insurance.

• Dental insurance.

• Vision insurance.

• Flexible Time Off.

• 401(k) plan.