Secure Cloud Architect

Job summary

Design and govern secure, end-to-end AWS environments for mission-critical Retrieval Augmented Generation (RAG) and data integration systems. Set architecture strategy across development, staging, and production, including VPC and subnet design, Amazon Bedrock and OpenSearch integration, and security controls for IAM, KMS, and secrets management. Guide architecture decisions and cross-team tradeoffs to meet security, compliance, availability, scalability, and operational readiness requirements.

Benefits

Qualifications

• Experience designing and governing end-to-end AWS architectures
• Experience designing IAM least-privilege protections, role segmentation, and policy governance
• Experience with KMS strategies, encryption standards, and secrets lifecycle management
• Experience assessing security risks in Amazon Bedrock, OpenSearch, Lambda, ECS or EKS, and cloud data storage integrations
• Experience applying security controls, compliance requirements, and accreditation-aligned architecture patterns
• Ability to communicate architectural decisions and collaborate across technical teams
• TS/SCI clearance
• High school diploma or GED

Responsibilities

• Define cloud architecture strategy for development, staging, and production environments
• Design VPC, subnet, routing, and secure connectivity patterns
• Select OpenSearch deployment models and shape Amazon Bedrock integration patterns
• Establish availability, scalability, and cost-control standards
• Own implementation security controls for IAM, KMS, secrets, and data access
• Create architecture decision records and resolve cross-team technical tradeoffs
• Integrate logging, monitoring, and security event capture
• Collaborate with security, application, data, and reliability engineering teams

Skills

Certifications

Degrees

Industry

Security clearance

Relocation