Associate Director (Cloud Security Architect)

Requirements Experience : 13+ years Extensive experience in AWS cloud security engineering, cloud security architecture, and securing large-scale production AWS environments. Expert knowledge of AWS Organizations, multi-account architectures, landing zones, and Service Control Policies (SCPs). Strong expertise in AWS IAM, least-privilege access, role-based access controls, identity federation, and privilege management. Hands-on experience designing and implementing AWS cloud security controls, including VPC security, network segmentation, private connectivity, and workload isolation. Strong experience securing Amazon EKS, Kubernetes clusters, containers, and cloud-native workloads. Proven expertise in Terraform and Infrastructure-as-Code (IaC) security, including policy enforcement, automated guardrails, and secure infrastructure provisioning. Strong understanding of Policy-as-Code practices and integrating security checks into CI/CD pipelines and DevSecOps workflows. Experience with AWS data protection capabilities, including encryption, AWS KMS, secrets management, key lifecycle management, and credential rotation. Knowledge of AWS-native security services for cloud security posture management, threat detection, logging, monitoring, and security incident investigation. Experience identifying and remediating cloud security misconfigurations, vulnerabilities, excessive permissions, and high-risk exposures. Understanding of cloud resilience, disaster recovery architecture, and