Job Description We’re looking for a Senior Cloud Security Architect to own and evolve our AWS security architecture across a multi-account environment. You’ll define guardrails, design secure patterns, and partner with platform and product teams to ship resilient, compliant services at speed. What you’ll do Architect Cloud Foundations: Support the strategy for our core AWS environment, including our multi-account structure, network security patterns (TGW, VPCs), and identity and access management (IAM) at scale. Secure the Software Development Lifecycle: Partner with engineering teams to embed security into every stage of development. This includes defining standards for container security (EKS), securing CI/CD pipelines with policy-as-code, and promoting secure Infrastructure-as-Code (IaC) modules. Lead Threat Detection and Response: Design and implement the strategy for cloud threat detection and monitoring. Serve as the primary technical expert during cloud security incidents to guide investigation and containment. Govern Data Protection and Encryption: Establish and oversee the enterprise strategy for data security in the cloud, defining standards and reference patterns for cryptographic services (KMS), data discovery, and service-specific encryption controls. Drive Governance, Risk, and Enablement: Translate compliance requirements (e.g., ISO 27001, SOC 2) into actionable cloud controls. Empower engineers by leading threat modeling sessions, facilitating architecture reviews, and publishing reusable security patterns. Evaluate and Integrate Security Tooling: Lead the evaluation, selection, and strategic integration of modern cloud security platforms (e.g., CNAPP, CSPM, CIEM) to provide measurable value and actionable insights.