AWS Cloud Solution Architect

AWS Cloud Solution Architect Cloud Security & Compliance: Deep expertise in AWS security controls, IAM, SCPs, and compliance frameworks relevant to financial services. Solution Design: Proven ability to design scalable, secure architectures and translate business requirements into technical solutions. Technical Leadership: Experience leading cross-functional teams, conducting stakeholder workshops, and presenting architectural decisions to both technical and non-technical audiences. DevOps & Automation: Hands-on experience with Terraform, CI/CD pipelines, and automation of cloud infrastructure. Communication: Strong documentation, presentation, and stakeholder management skills. Qualifications: Relevant certifications (e.g., AWS Certified Solutions Architect, TOGAF, CISSP) are highly desirable. 10+ years of experience in IT, with at least 5 years in cloud architecture and security roles. The Solution Architect is responsible for designing, implementing, and overseeing cloud security and compliance solutions for AWS environments supporting E-Trade operations. This role ensures alignment with security policies, industry standards, and regulatory requirements, while driving technical excellence and operational efficiency. Key Responsibilities: Assessment & Roadmap Development: Lead discovery and assessment of current AWS accounts, IAM roles, SCPs, and Terraform modules. Identify security gaps and develop a phased implementation roadmap in collaboration with stakeholders. Security Policy & Control Design: Design and validate Service Control Policies (SCPs) to enforce least privilege, root user lockdown, and IP whitelisting. Ensure policies are tested in non-production environments before rollout. IAM Role Management: Audit and refactor IAM roles to eliminate over-permissioning, deprecate shared roles, and implement least-privilege, function-specific access with clear permission boundaries. Break-Glass Access: Develop and document secure, auditable break-glass access procedures, including MFA enforcement, time-bound access, and approval workflows. Infrastructure as Code (IaC): Review and update Terraform modules to ensure secure-by-default configurations, including encryption, tagging, and logging. Oversee peer reviews and validation in staging environments. Testing & Validation: Lead functional and negative testing of IAM and SCP changes, ensuring compliance with security benchmarks and operational requirements. Production Rollout & Documentation: Oversee deployment of validated controls and modules to production, monitor for anomalies, and ensure comprehensive documentation and knowledge transfer. This role leads end to end AWS security modernization: assessing existing accounts, IAM roles, SCPs and Terraform modules to define a phased remediation roadmap. It designs and validates security controls including least privilege SCPs, IAM role rationalization and secure security mechanisms. It drives secure-by-default IaC through Terraform enhancements, peer reviews and staged validation. Responsibilities include leading functional testing, coordinating production rollouts and ensuring thorough documentation and knowledge transfer. Requires deep AWS security expertise, strong solution design capability, hands-on DevOps/Terraform experience and proven technical leadership across cross functional teams. Candidates should have 10+ years in IT, relevant cloud/security certifications, and strong communication and stakeholder management skills.