What are the responsibilities and job description for the AWS Security Architect position at Technology Ventures?
Hiring for a Senior Information Security Architect position primarily focusing on AWS. This position requires deep expertise in Information Security principles including Business Security Architecture, Threat Modelling, Data Security (data encryption, masking, tokenization, data access controls), AWS Cloud and Systems architecture. This individual must be able to architect and ensure the security and compliance of the cloud environments based on enterprise cloud security policies, standards, procedures and industry best practices and frameworks (NIST, OWASP)
• Self-starter and Senior Architect who can lead the AWS Security architecture program in multiple projects simultaneously by collaborating with numerous stakeholders (Product owners, Enterprise Architect)
• Role Requirements and Candidate Evaluation: explained the senior architecture role's requirements, emphasizing deep AWS and security expertise, and discussed challenges in candidate evaluation and contributing insights on certifications and market trends.
o AWS and Security Expertise: outlined that the role is a senior architecture position requiring candidates to be experts in AWS architecture and security controls, capable of influencing enterprise-level changes and building solutions for new systems.
o Feedback on Interview Process: requested more detailed interview feedback to help staffing partners understand gaps in candidate qualifications
• Location and On-Site Interview Requirements: clarifying that the role requires candidates to be based in Reston or Plano, with limited exceptions for on-site interviews.
• Technical Domain Emphasis within AWS: requested clarification on which AWS domains are most important, and explained that candidates should have deep expertise in specific domains rather than broad knowledge across all AWS services.
o Domain Expertise: clarified that successful candidates typically have deep expertise in particular AWS domains, such as databases or application servers, and are not expected to be experts in all AWS services.
Must Have
1 Public Cloud: AWS Experience
Deep Expertise and proven Track record in AWS Architecture and AWS Services (Compute, IAM, RDS, Resource Policies, Network, Messaging, Data Storage, CI/CD, AI/ML, ETL, Serverless, ECS/EKS). Experience with AWS security pillars, best practices and well designed architecture. Experience in AI/ML is preferable.
2 Information Security Architecture
Key experience: Application security, Threat Modelling, API Security, DevSecOps, Pipeline security, Infrastructure security, AuthN/Z, Encryption, Key Management, Data discovery and encryption, SIEM, CSPM, CWPP, Access Controls, Container Security
• Industry security standards and frameworks (OWASP, NIST CIS, FED Ramp, ISO, SOX etc.).
• Experience designing Architectures based on Security Standards and threat model the designs to identify issues and design mitigating controls.