Associate Director (Cloud Security Architect)

Job description

Requirements Experience : 13+ years Extensive experience in AWS cloud security engineering, cloud security architecture, and securing large-scale production AWS environments. Expert knowledge of AWS Organizations, multi-account architectures, landing zones, and Service Control Policies (SCPs). Strong expertise in AWS IAM, least-privilege access, role-based access controls, identity federation, and privilege management. Hands-on experience designing and implementing AWS cloud security controls, including VPC security, network segmentation, private connectivity, and workload isolation. Strong experience securing Amazon EKS, Kubernetes clusters, containers, and cloud-native workloads. Proven expertise in Terraform and Infrastructure-as-Code (IaC) security, including policy enforcement, automated guardrails, and secure infrastructure provisioning. Strong understanding of Policy-as-Code practices and integrating security checks into CI/CD pipelines and DevSecOps workflows. Experience with AWS data protection capabilities, including encryption, AWS KMS, secrets management, key lifecycle management, and credential rotation. Knowledge of AWS-native security services for cloud security posture management, threat detection, logging, monitoring, and security incident investigation. Experience identifying and remediating cloud security misconfigurations, vulnerabilities, excessive permissions, and high-risk exposures. Understanding of cloud resilience, disaster recovery architecture, and security requirements for business-critical workloads. Experience supporting security audits, compliance assessments, risk remediation, and client security assurance activities. Ability to develop reusable security reference architectures, technical standards, remediation roadmaps, and measurable security controls. Strong technical leadership, analytical, troubleshooting, and cross-functional collaboration skills. Excellent communication skills, with the ability to work effectively with cloud engineering, DevOps, platform engineering, enterprise security, and compliance stakeholders. Responsibilities Design, implement, and maintain AWS cloud security architecture across large-scale production environments, ensuring secure, scalable, and compliant cloud operations. Define and maintain secure multi-account AWS environments, including landing zones, AWS Organizations, and Service Control Policies (SCPs). Implement least-privilege access controls using AWS Identity and Access Management (IAM), supporting effective cloud identity and privilege management. Design and enforce secure VPC networking, network segmentation, ingress and egress controls, private connectivity, and workload isolation. Establish and maintain security baselines for Amazon EKS, Kubernetes clusters, container images, and associated workloads. Implement Infrastructure-as-Code (IaC) and Policy-as-Code security guardrails using Terraform or equivalent tools. Identify, assess, prioritize, and remediate cloud misconfigurations, security posture findings, vulnerabilities, and high-risk exposures. Define and implement data protection controls, including encryption at rest and in transit, AWS Key Management Service (KMS), secrets management, key lifecycle management, and credential rotation. Strengthen cloud logging, monitoring, threat detection, and security telemetry using AWS-native security services and automated monitoring capabilities. Integrate security controls into CI/CD pipelines, infrastructure provisioning workflows, and deployment processes in collaboration with DevOps and platform engineering teams. Develop reusable, auditable, and developer-friendly security controls, reference architectures, and standardized cloud security patterns. Support cloud resilience and disaster recovery initiatives, including recovery architecture design and validation for critical workloads. Provide technical evidence, remediation guidance, and security documentation for audits, compliance assessments, and client assurance requirements. Develop cloud security remediation roadmaps, operational metrics, and continuous improvement initiatives to strengthen the organization's overall cloud security posture. Collaborate with cloud engineering, enterprise security, platform engineering, DevOps, and compliance teams to ensure consistent implementation of security standards. Bachelor’s or master’s degree in computer science, Information Technology, or a related field. 👋🏼We're Nagarro. We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at a scale — across all devices and digital mediums, and our people exist everywhere in the world (18500+ experts across 39 countries, to be exact). Our work culture is dynamic and non-hierarchical. We are looking for great new colleagues. That is where you come in!