4Bell Technology

Staffing & Recruiting

Senior Cloud Security Architect (AWS & Ecosystem)(R-1997)

1,200,000.00-1,500,000.00/A

Any Degree

IT (Information Technology)

Contract

Mumbai

05-Oct-2026

Cybersecurity AWS CSPM CNAPP Next-Gen Firewalls Palo Alto VM-Series FortiGate Gateway Load Balancer (GWLB) SOC Integration Splunk/Microsoft Sentinel

Job Description

Key Responsibilities

  • AWS Native Security: Design multi-account architectures using AWS Organizations, SCPs, IAM Identity Center, and Security Hub. Enforce guardrails with GuardDuty, Inspector, Macie, KMS, CloudTrail, Config, AWS WAF, and Network Firewall.
  • CSPM & CNAPP Governance: Operationalize enterprise CSPM tools (Wiz, Orca, Prisma Cloud) for continuous posture monitoring, compliance tracking, and drift remediation across AWS workloads.
  • Perimeter & Network Security: Integrate virtual Next-Gen Firewalls (Palo Alto VM-Series, FortiGate) via Gateway Load Balancer (GWLB), managing dual-layer WAF/DDoS strategies (AWS WAF, Cloudflare, Akamai).
  • Vulnerability Assessment & Patch Management: Automate vulnerability management and patch orchestration across EC2 and hybrid workloads using AWS Systems Manager alongside tools like Qualys, Tenable, or Rapid7.
  • Endpoint Protection & SOC Integration: Deploy enterprise EDR/AV solutions (CrowdStrike, SentinelOne) and stream telemetry (VPC Flow Logs, GuardDuty, CloudTrail) to enterprise SIEM/XDR platforms (Splunk, Microsoft Sentinel).
  • DevSecOps & Automation: Codify security guardrails using Infrastructure as Code (Terraform, CloudFormation) and embed security testing (Checkov, tfsec) directly into CI/CD pipelines.

Qualifications & Certifications

  • Experience: 8+ years in Cybersecurity, with 5+ years specifically architecting security for enterprise-scale AWS environments.
  • Certifications (Must have at least one):
    • AWS Certified Security – Specialty
    • AWS Certified Solutions Architect – Professional
  • Desirable Certifications: CISSP, CCSP, or relevant credentials.