Back to SearchCloud Security Architect - AWS & Data Platforms
Hybrid in Republic of Lithuania, Latvia
Security.Engineering& 3 others
Looking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a job
Choose an option
We are looking for a hands-on Cloud Security Architect to strengthen security across enterprise cloud and data platforms.
The role focuses on security architecture, identity and access management (IAM), vulnerability management, DevSecOps, and compliance. You will turn enterprise security requirements into practical, automated controls across AWS, Snowflake, GitHub, and supporting services, working closely with platform engineering and central Security/IAM teams.
Responsibilities
- Design and review secure AWS and data-platform architectures, including network segmentation, encryption, secrets management, logging, and workload isolation
- Perform threat modeling, security design reviews, and technical risk assessments; define reusable security patterns and guardrails
- Align solutions with enterprise security policies, ISO 27001, GDPR, and applicable pharmaceutical/GxP requirements
- Support audits, security control assessments, evidence collection, and risk remediation
- Design IAM for AWS, Snowflake, GitHub, and service integrations using least privilege, RBAC/ABAC, SSO, SAML, and OIDC
- Improve role models, privileged access, service identities, authentication, authorization, and secrets management; review and remediate excessive permissions and access misconfigurations
- Collaborate with central IAM on identity lifecycle, access reviews, provisioning/deprovisioning, and integrations with tools such as SailPoint IdentityNow
- Define and improve vulnerability discovery, risk-based prioritization, remediation tracking, and escalation processes; assess cloud misconfigurations, container images, infrastructure components, and third-party dependencies
- Leverage AWS Security Hub, GuardDuty, Config, CloudTrail, IAM Access Analyzer, and CSPM tools to improve visibility and controls; support security incident investigations and follow-up preventive measures
- Embed security into infrastructure-as-code and CI/CD workflows using AWS CDK and GitHub Actions, including SAST, SCA, IaC and container scanning, and DAST where relevant
- Secure CI/CD identities, OIDC-based access, deployment permissions, secrets, and supply-chain controls; automate security checks, compliance evidence, reporting, and repeatable remediation
- Design secure Snowflake access models, including roles, row-level security, masking, and sensitive-data protection; contribute security requirements to monitoring, incident response, backup, and disaster recovery designs
Requirements
- Degree in Computer Science, Cybersecurity, or a related field, or equivalent experience
- 7+ years of practical experience in AWS cloud security architecture and core security services
- Deep knowledge of IAM, identity federation, least-privilege design, and access governance
- Background in vulnerability management, cloud security posture, threat modeling, and risk-based remediation
- Hands-on expertise in IaC (AWS CDK, Terraform, or CloudFormation) and CI/CD security, preferably GitHub Actions
- Understanding of containers/Kubernetes, networking, and encryption, along with cloud security monitoring
- Familiarity with ISO 27001, NIST, and GDPR, as well as enterprise security governance
- Capability to translate security policies into engineering solutions and collaborate effectively across teams
- English proficiency at an Upper-Intermediate level (B2) or higher
Nice to have
- Experience with Snowflake security, data-access governance, and row-level security
- Proficiency in SailPoint IdentityNow or similar identity governance platforms
- Familiarity with security tooling such as Wiz, Prisma Cloud, and Snyk, as well as Trivy or Checkov
- Background in pharma, healthcare, or another regulated industry, including knowledge of GxP/GAMP 5
- Certifications such as AWS Security Specialty, CISSP, CCSP, or CISM