Sr. Security Architect Jobot
Seal Beach, CA2 days ago
- $140,000–$200,000 Per Year
Want to know if you’re a fit?
Upload your resume and let our AI show you.
Upload your resume and let our AI show you.
Skills
- Amazon Elastic Compute Cloud (EC2)unmatched
- Amazon Web Services (AWS)unmatched
- Applications Securityunmatched
- Authenticationunmatched
- Cloud Architectureunmatched
- Cloud Computingunmatched
- Code Reviewsunmatched
- Computer Securityunmatched
- Cryptographyunmatched
- Data Migrationunmatched
- Endpoint Securityunmatched
- Enterprise Protectionunmatched
- Enterprise Service Bus (ESB)unmatched
- Firewallsunmatched
- Hybrid Cloudunmatched
- ISO (International Organization for Standardization)unmatched
- Identity Federationunmatched
- Information/Data Security (InfoSec)unmatched
- Intrusion Detection Systemsunmatched
- Intrusion Prevention Systemsunmatched
- Javaunmatched
- Knowledge Managementunmatched
- Machine Toolunmatched
- Microsoft .NETunmatched
- Microsoft SQL Serverunmatched
- Microsoft Windows Serverunmatched
- Middlewareunmatched
- Nessusunmatched
- Network Operations Centerunmatched
- Operational Auditunmatched
- Operations Security (OPSEC)unmatched
- Oracleunmatched
- Penetration Testingunmatched
- Red Hat Linux Operating Systemunmatched
- Risk Analysisunmatched
- Security Analysisunmatched
- Security Architectureunmatched
- Security Information and Event Management (SIEM)unmatched
- System Integration (SI)unmatched
- TIBCO Product familyunmatched
- Testingunmatched
- U.S. National Institute of Standards and Technology (NIST)unmatched
Description
Job Title: Cloud Security Architect
Duration- Fulltime Permanent
Location: Irvine, CA (Onsite From Day 1)
Job Description:
Cloud Security Architect
Must Have Technical/Functional Skills
• Strong expertise in AWS cloud security architecture including IAM, KMS, GuardDuty, and CloudTrail.
• Deep understanding of AWS Landing Zone, SCPs, governance, and enterprise security guardrails.
• Experience with security for custom applications including vulnerability identification and remediation.
• Proficiency with VAPT tools such as Nessus, Qualys, Burp Suite, Fortify, and Checkmarx.
• Strong understanding of WAF, firewall management, IDS/IPS, and network segmentation.
• Knowledge of OS-level security for Windows Server 2016–2025 and RHEL 7/8/9.
• Familiarity with securing Java, .NET, TIBCO ESB, and integration-heavy workloads.
• Understanding of database security for Oracle 19c, Exadata on AWS, and SQL Server.
• Ability to apply Zero Trust, least privilege, encryption, and secure-by-design principles.
• Strong collaboration skills across infra, app, DB, network, and DevOps teams.
Roles & Responsibilities
• Lead cloud security architecture for the Data Center Exit migration to AWS EC2.
• Design and implement AWS Landing Zone security including IAM guardrails, SCPs, and logging.
• Conduct application and infra vulnerability assessments and define remediation plans.
• Implement WAF rules, firewall policies, secure segmentation, and endpoint protection.
• Validate authentication, authorization, and encryption models for all migrated workloads.
• Support secure deployment practices, code reviews, and remediation of development gaps.
• Integrate SIEM systems with AWS native security tools for continuous monitoring.
• Define and enforce cloud security baselines aligned with CIS, NIST, and ISO controls.
• Lead penetration testing cycles and coordinate mitigation activities.
• Produce security HLD/LLD, risk assessments, and operational security runbooks.
3. Cloud Experience Needed
• Hands-on experience designing secure AWS multi-account Landing Zones and guardrail policies.
• Strong understanding of EC2 security, IAM, encryption, and identity federation models.
• Integration knowledge for Oracle Exadata on AWS, SQL Server, and middleware security flows.
• Experience with AWS WAF, Shield, GuardDuty, Security Hub, and detective controls.
• Ability to design security for EKS workloads including pod/network policies and image scanning.
• Understanding of security in hybrid cloud migrations and AWS migration tooling.
Duration- Fulltime Permanent
Location: Irvine, CA (Onsite From Day 1)
Job Description:
Cloud Security Architect
Must Have Technical/Functional Skills
• Strong expertise in AWS cloud security architecture including IAM, KMS, GuardDuty, and CloudTrail.
• Deep understanding of AWS Landing Zone, SCPs, governance, and enterprise security guardrails.
• Experience with security for custom applications including vulnerability identification and remediation.
• Proficiency with VAPT tools such as Nessus, Qualys, Burp Suite, Fortify, and Checkmarx.
• Strong understanding of WAF, firewall management, IDS/IPS, and network segmentation.
• Knowledge of OS-level security for Windows Server 2016–2025 and RHEL 7/8/9.
• Familiarity with securing Java, .NET, TIBCO ESB, and integration-heavy workloads.
• Understanding of database security for Oracle 19c, Exadata on AWS, and SQL Server.
• Ability to apply Zero Trust, least privilege, encryption, and secure-by-design principles.
• Strong collaboration skills across infra, app, DB, network, and DevOps teams.
Roles & Responsibilities
• Lead cloud security architecture for the Data Center Exit migration to AWS EC2.
• Design and implement AWS Landing Zone security including IAM guardrails, SCPs, and logging.
• Conduct application and infra vulnerability assessments and define remediation plans.
• Implement WAF rules, firewall policies, secure segmentation, and endpoint protection.
• Validate authentication, authorization, and encryption models for all migrated workloads.
• Support secure deployment practices, code reviews, and remediation of development gaps.
• Integrate SIEM systems with AWS native security tools for continuous monitoring.
• Define and enforce cloud security baselines aligned with CIS, NIST, and ISO controls.
• Lead penetration testing cycles and coordinate mitigation activities.
• Produce security HLD/LLD, risk assessments, and operational security runbooks.
3. Cloud Experience Needed
• Hands-on experience designing secure AWS multi-account Landing Zones and guardrail policies.
• Strong understanding of EC2 security, IAM, encryption, and identity federation models.
• Integration knowledge for Oracle Exadata on AWS, SQL Server, and middleware security flows.
• Experience with AWS WAF, Shield, GuardDuty, Security Hub, and detective controls.
• Ability to design security for EKS workloads including pod/network policies and image scanning.
• Understanding of security in hybrid cloud migrations and AWS migration tooling.
Numbers & Facts
| Location | IRVINE, CA |
| Industry | Computer/IT Services |
| Company Size | 500 to 999 employees |
| Year Founded | 1990 |
| Website | http://q1tech.com/ |
About Company
Q1 consists of experienced and recognized experts providing the capability to respond to market demand in order to provide professional services for our clients including Enterprise software implementations, application integration and technical / functional support.
Q1 has steadily grown into a Quality IT services and solutions organization with the average experience of our team being over 10 years. We have continuously met or exceeded client expectations by delivering professional services and project implementations on time and under budget to help clients truly recognize return on investment.
Similar Jobs
- New!
Solution / Enterprise Architect (.NET & AWS) Tanisha Systems
Torrance, CA13 days ago- Full-time