AWS Security Architect

Piper Companies is seeking an AWS Security Architect to join a mature Information Security organization supporting a large-scale enterprise AWS cloud environment. The AWS Security Architect will partner with Cloud Engineering, DevOps, Enterprise Architecture, and Application Development teams to design secure cloud solutions, establish enterprise security standards, and provide strategic guidance across multiple business units. This position is hybrid in Reston, VA!

Responsibilities of the AWS Security Architect:

• Serve as a trusted security advisor for enterprise AWS cloud initiatives across multiple business units
• Review AWS solution architectures to ensure alignment with enterprise security standards, regulatory requirements, and cloud security best practices
• Partner with Cloud Engineering, Platform Engineering, DevOps, Enterprise Architecture, and Application Development teams throughout the solution design lifecycle
• Conduct cloud security architecture reviews, threat modeling, and security risk assessments
• Develop secure AWS architecture patterns, reference architectures, and enterprise security standards
• Evaluate new AWS services and emerging cloud technologies from a security and compliance perspective
• Provide guidance on Identity and Access Management (IAM), network segmentation, encryption, logging, monitoring, and secure application architecture
• Participate in Architecture Review Boards (ARB) and security governance initiatives
• Recommend cloud security controls to support enterprise-wide security posture and compliance objectives
• Collaborate with security leadership to drive cloud security strategy and continuous improvement initiatives
• Communicate security risks, recommendations, and architectural decisions to technical and executive stakeholders

Qualifications for the AWS Security Architect:

• 8+ years of Information Security experience with a strong focus on cloud security
• 5+ years of experience designing and securing enterprise AWS environments
• Experience serving as a Security Architect, Cloud Security Architect, or Enterprise Security Architect
• Experience supporting Financial Services or other highly regulated industries
• Strong knowledge of cloud security governance, security architecture, and secure design principles
• Experience conducting architecture reviews, threat modeling, and security risk assessments
• Strong understanding of AWS Identity and Access Management (IAM), security controls, and cloud networking
• Excellent communication skills with the ability to influence engineering teams, architects, and business stakeholders
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field; equivalent experience will be considered

Preferred Qualifications:

• AWS Certified Solutions Architect – Professional, AWS Certified Security – Specialty, or related AWS certifications
• Experience with Zero Trust Architecture and Cloud Security Posture Management (CSPM)
• Experience with Infrastructure as Code (Terraform, CloudFormation, or AWS CDK)
• Knowledge of container security including Amazon EKS, ECS, and Kubernetes
• Familiarity with security frameworks including NIST, CIS Benchmarks, ISO 27001, PCI DSS, or SOC 2
• Experience with SIEM, cloud logging, and security monitoring platforms

Compensation for the AWS Security Architect:

• $140,000 - $160,000
• Opportunity for full-time conversion after six months
• Comprehensive Benefits Package including Medical, Dental, Vision, 401(k), PTO, and Paid Holidays

#LI-MM1 #LI-HYBRID

Keywords: AWS Security Architect, Cloud Security Architect, Enterprise Security Architect, Information Security Architect, Cloud Architect, AWS, Amazon Web Services, Cloud Security, Enterprise Cloud, AWS IAM, Identity and Access Management, IAM, AWS Organizations, AWS Control Tower, AWS Landing Zone, AWS Security Hub, GuardDuty, Inspector, Macie, KMS, AWS Key Management Service, Secrets Manager, CloudTrail, CloudWatch, AWS Config, VPC, Transit Gateway, Security Groups, Network ACLs, Route 53, EC2, ECS, EKS, Kubernetes, Lambda, S3, RDS, DynamoDB, Aurora, CloudFormation, Terraform, AWS CDK, DevSecOps, DevOps, Zero Trust, Threat Modeling, Security Architecture, Cloud Governance, Security Frameworks, NIST, CIS, PCI DSS, SOC 2, ISO 27001, Risk Assessment, Security Engineering, Cloud Compliance, CSPM, CNAPP, Enterprise Architecture, Financial Services, Hybrid, Reston VA, Contract-to-Hire