AWS Data Platform Security Architect

Tasks

• Establish AWS Glue Data Catalog coverage across in-scope accounts and quantify the gap
• Document how the incumbent product authenticates and reaches data today
• Design least-privilege cross-account access: IAM roles, trust policies, S3 bucket policies, KMS key policies
• Design network access using VPC endpoints, PrivateLink and serverless networking
• Produce security-review-ready documentation: data flows, trust boundaries, threat model
• Secure the infosec review slot in week 1 and steer the design to approval
• Author the security and governance model plus the production operating model

Requirements

• 7+ years in cloud/data platform security architecture, with deep AWS expertise
• Cross-account IAM design (trust policies, permission boundaries, condition keys)
• S3 security at depth (bucket policies, access points)
• Cross-account KMS key policies and grants
• AWS Glue Data Catalog, crawlers and Lake Formation
• VPC endpoints, PrivateLink and private networking
• Databricks on AWS security (or a comparable managed-service security model)
• A track record of designs that cleared formal security review in regulated organizations
• Nice to have: STRIDE/threat modelling, financial services experience, AWS Security Specialty, Control Tower/SCPs, DSPM-style scanning experience.

Schedule

• 3-Month Contract
• Onsite

How to apply

• Send your updated resume, expected rate, and availability by email

Location

• New Jersey or Washington DC