Security Engineer – Architect

Role Overview

• Implement and enforce security controls in cloud environments (AWS, Azure, and/or GCP).
• Review and harden cloud configurations, governance, IAM policies, and resource permissions.
• Monitor cloud environments using CSPM tools and respond to misconfigurations and alerts.
• Support secure architecture design for cloud-native and hybrid workloads.
• Provide oversight and architectural guidance for firewalls, IDS/IPS systems, VPNs, and network segmentation controls.
• Review and approve firewall rules, network policies, and security device configurations to ensure alignment with security standards.
• Conduct regular vulnerability assessments on network infrastructure and oversee remediation by relevant teams.
• Define and enforce network access control policies and zero-trust principles across the organization.
• Champion and enforce secure development practices, ensuring development teams adhere to security principles throughout the SDLC.
• Define and maintain application security standards, policies, and guidelines for development teams to follow.
• Conduct periodic application security assessments and coordinate with teams on risk prioritization.
• Primary owner for execution of infrastructure remediation workstreams (patching/hardening/logging changes) and maintaining delivery cadence.
• Own the external-facing findings workflow end-to-end (triage → ticketing → change control → validation) under Infrastructure leadership working with IT Security team.
• Harden on-premises servers, endpoints, and critical services (e.g., Active Directory, Exchange, DNS).

Requirements

• 3–5 years of experience in an information security or security engineering role.
• Hands-on experience with network security tools (firewalls, IDS/IPS, VPN, network monitoring).
• Familiarity with application security practices, OWASP Top 10, and common vulnerability types.
• Experience securing cloud environments in AWS, Azure, or GCP.
• Working knowledge of Windows and Linux system hardening and administration.
• Experience with SIEM platforms and log analysis (e.g., Splunk, Microsoft Sentinel, Elastic).
• Strong understanding of authentication protocols, TLS/SSL, PKI, and access management.
• Ability to communicate security risks clearly to both technical and non-technical audiences.
• Relevant certifications such as Security+, CEH, OSCP, AWS Security Specialty, or CISSP (Associate).

Tech Stack

• AWS
• Azure
• Cloud
• DNS
• Firewalls
• Google Cloud Platform
• Linux
• SDLC
• Splunk

Benefits

• Health insurance
• Retirement plans
• Paid time off
• Flexible work arrangements
• Professional development
• Accommodation for disabilities