AWS Cloud Security Architect (Senior Specialist - Architecture)

Careers at LTM

AWS Cloud Security Architect (Senior Specialist - Architecture)

• Job ID: 893245
• 10 - 15 Years
• 1 Opening
• Jersey City - New Jersey - USA

Apply Now

Share with friends

• Share on Facebook
• Share on Linkedin
• Post on X App
• Email your friends

Role description

Title: AWS Cloud Security Architect

Location: Remote

Cloud Security Engineer - SRC (Partner)

Description: Hands-on policy authoring and implementation resources responsible for designing and writing Service Control Policies (SCPs), Resource Control Policies (RCPs) and data perimeter policy rule sets. Work under the direction of the AWS Lead Security Consultant. Responsible for Terraform-compatible policy code delivery, testing in non-production environments, and blast radius analysis. Resources are required to cover the volume of work (47 SCPs + 11 RCPs + data perimeter) within the engagement timeline.

Activities:

• Author SCP policy rule sets for all 47 enabled AWS services, prioritized by SCI tier
• Author RCP policy rule sets for the 11 eligible services (S3, KMS, CloudWatch Logs, DynamoDB, EC2 Autoscaling, Inspector, Kinesis, SQS, CodeBuild, CodePipeline, Secrets Manager)
• Implement VPC endpoint policies and resource-based policies for critical assets (logging buckets, KMS keys)
• Deliver all policy artifacts as Terraform-compatible code for deployment via Control Tower AFT pipelines (new landing zone) and hybrid Terraform/manual deployment (legacy landing zone)
• Validate policy syntax and functionality in sandbox/non-production environments
• Conduct blast radius analysis documenting potential impact of each policy on existing workloads
• Develop phased rollout plans (Account/OU level to root) for each policy batch
• Identify and document Control Tower default SCP overlaps with custom policies
• Develop operational runbooks for ongoing policy management and exception handling
• Conduct knowledge transfer sessions with Customers Platform Engineering Team and Cloud Engineering teams

Skills Required:

• AWS Certified Security - Specialty (required)
• Hands-on experience authoring SCPs, RCPs, and data perimeter controls (VPC endpoint policies, resource-based policies)
• Strong Terraform/Infrastructure-as-Code skills, including experience with AWS Control Tower AFT
• Deep knowledge of IAM policy language, condition keys, and service-specific policy capabilities
• Experience with phased deployment of organizational policies in multi-account AWS environments
• Understanding of blast radius analysis and rollback methodologies for policy changes
• Familiarity with NIST and financial services compliance requirements

Experience working across both Control Tower and legacy (non-CT) AWS landing zones

Skills

Mandatory Skills : Application Rearchitecting, Architectural diagrams, Architecture Patterns and Styles, Architecture Principle Design

Good to Have Skills : Estimation

Other details

Actual compensation within the range will be dependent upon the individual''s skills, experience, performance and internal equity.

Benefits/perks listed below may vary depending on the nature of your employment with LTIMindtree ("LTIM"):

Benefits and Perks:

• Comprehensive Medical Plan Covering Medical, Dental, Vision
• Short Term and Long-Term Disability Coverage
• 401(k) Plan with Company match
• Life Insurance
• Vacation Time, Sick Leave, Paid Holidays
• Paid Paternity and Maternity Leave

The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job-related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation like an annual performance-based bonus, sales incentive pay and other forms of bonus or variable compensation.

Disclaimer: The compensation and benefits information provided herein is accurate as of the date of this posting.

LTIMindtree is an equal opportunity employer that is committed to diversity in the workplace. Our employment decisions are made without regard to race, color, creed, religion, sex (including pregnancy, childbirth or related medical conditions), gender identity or expression, national origin, ancestry, age, family-care status, veteran status, marital status, civil union status, domestic partnership status, military service, handicap or disability or history of handicap or disability, genetic information, atypical hereditary cellular or blood trait, union affiliation, affectional or sexual orientation or preference, or any other characteristic protected by applicable federal, state, or local law, except where such considerations are bona fide occupational qualifications permitted by law.

Benefits

Compensation range: $ 99,815.00 to 148,400.00 per year

View all 1263 role(s)

Apply Now

Share with friends

Toggle Dropdown

• Share on Facebook
• Share on Linkedin
• Share on WhatsApp
• Post on X App
• Email your friends

View more

About LTM

LTM is an AI-centric global technology services company and the Business Creativity partner to the world's largest and most disruptive enterprises. We bring human insights and intelligent systems together to help clients create greater value at the intersection of technology and domain expertise. Our capabilities span integrated operations, transformation, and business AI - enabling new ways of working, new productivity paradigms, and new roads to value. Together with over 87,000 employees across 40 countries and our global network of partners, LTM - a Larsen & Toubro company - owns business outcomes for our clients, helping them not just outperform the market, but to Outcreate it. Please also note that neither LTM nor any of its authorized recruitment agencies/partners charge any candidate registration fee or any other fees from talent (candidates) towards appearing for an interview or securing employment/internship. Candidates shall be solely responsible for verifying the credentials of any agency/consultant that claims to be working with LTM for recruitment. Please note that anyone who relies on the representations made by fraudulent employment agencies does so at their own risk, and LTM disclaims any liability in case of loss or damage suffered as a consequence of the same. Recruitment Fraud Alert - https://www.ltm.com/careers/recruitment-fraud-alert

View more

Wish to submit your profile for future opportunities?

Click here