Senior Cloud Security Architect (AWS)

TL;DR

Senior Cloud Security Architect (AWS): Designing and implementing secure AWS architectures and automation to enable delivery velocity without compromising security with an accent on secure-by-default patterns and guardrails. Focus on implementing enterprise AWS guardrails, least-privilege IAM, and embedding security into CI/CD pipelines via policy-as-code.

Location: Remote-first (US). Must be based in the US; final candidates are required to participate in at least one in-person interview and some travel is expected for collaboration.

Company

hirify.global provides software solutions for the automotive parts and repair industry, streamlining workflows for manufacturers, dealers, and repair shops.

What you will do

• Design secure reference architectures and reusable security patterns for AWS workloads (identity, networking, encryption, and secrets management).
• Implement enterprise AWS guardrails using Control Tower, SCPs, Security Hub, and AWS Config.
• Establish detection-as-code and telemetry standards integrated with SIEM/SOAR platforms.
• Embed security into CI/CD pipelines using policy-as-code, Terraform checks, and container scanning.
• Automate remediation and drift detection utilizing Lambda, Step Functions, and Terraform.
• Perform threat modeling (STRIDE) and map technical controls to frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, and HIPAA.

Requirements

• 7+ years of experience in cloud architecture and security, including leading large-scale AWS transformations.
• Hands-on expertise with AWS security services: IAM, KMS, GuardDuty, WAF/Shield, and Network Firewall.
• Proficiency with Infrastructure-as-Code (Terraform) and automation (Python/Bash).
• Strong background in Zero Trust patterns and securing data at scale (DLP, tokenization).
• Experience with container and serverless security (ECS, Lambda).
• Ability to travel periodically for in-person collaboration.

Culture & Benefits

• Medical, Dental, and Vision benefits starting on Day 1.
• 401(k) with company match.
• Unlimited Flex Time Off plus 10 company-paid holidays.
• Remote-first environment with a monthly communication stipend and home office equipment stipend.
• Professional development programs and tuition assistance.