Cloud Security Architect

AWS Cloud Security Architect | IAM, Networking & Governance

Design and secure complex AWS environments, from Landing Zone architecture to production workloads.

A leading organization in Central Israel is looking for an experienced AWS Cloud Security Architect to lead the design and implementation of secure cloud infrastructure and cybersecurity architecture.

This role combines AWS security architecture, multi-account environments, identity and access management, cloud networking, threat modeling, security monitoring, and DevSecOps.

You'll take ownership of architectural design across AWS environments, define security controls, produce HLD and LLD documentation, and work closely with technical teams to implement secure, scalable cloud solutions.

What You'll Do

• Design and lead AWS cloud security and infrastructure architecture.
• Plan and implement Landing Zones and multi-account AWS environments.
• Define cloud governance, organizational policies, and Service Control Policies (SCPs) using AWS Control Tower.
• Design IAM architecture, access permissions, and resource policies.
• Architect Hub-and-Spoke cloud networks using AWS Transit Gateway.
• Work with AWS Direct Connect and Site-to-Site VPN connectivity.
• Implement and operate AWS security monitoring services, including CloudTrail, GuardDuty, Security Hub, and AWS Config.
• Design and integrate AWS WAF and cloud firewall solutions.
• Perform threat modeling and identify potential attack vectors in cloud environments.
• Define security controls and implement solutions to reduce cyber risks.
• Design and maintain infrastructure using AWS CloudFormation and Infrastructure as Code principles.
• Work with AWS Systems Manager (SSM), KMS, Secrets Manager, ACM, and ECR.
• Integrate DevSecOps principles into development and delivery processes.
• Prepare High-Level Design (HLD) and Low-Level Design (LLD) architecture documentation.
• Guide technical teams throughout solution implementation.
• Ensure alignment with security standards, regulatory requirements, and organizational security policies.

Mandatory Requirements

• At least 4 years of AWS IAM experience within the past 5 years.
• Hands-on experience analyzing IAM policies and AWS resource-based policies.
• Practical experience with AWS Control Tower and Service Control Policies (SCPs).
• At least 4 years of experience implementing and operating cloud security and monitoring solutions.
• Experience with CloudTrail, GuardDuty, Security Hub, AWS Config, WAF, and firewall solutions.
• At least 4 years of experience in threat modeling and defining security controls.
• At least 4 years of experience designing Hub-and-Spoke network architecture in AWS multi-account environments.
• Experience with AWS Transit Gateway.
• Familiarity with Direct Connect and Site-to-Site VPN.
• Strong hands-on proficiency in Infrastructure as Code using AWS CloudFormation.
• Experience with AWS Systems Manager (SSM), KMS, Secrets Manager, ACM, and ECR.
• Experience preparing HLD and LLD architecture documents.
• Native-level Hebrew and strong English proficiency.

Advantages

• AWS Architect certification.
• At least 3 years of experience as a Cloud Architect or Security Architect in an enterprise AWS environment.
• Experience with Amazon CloudFront.
• Experience with Application Load Balancer (ALB) or Network Load Balancer (NLB).
• Experience with Amazon API Gateway.
• Experience with AWS PrivateLink.
• Experience with Amazon Route 53.

Education — At Least One of the Following

• Bachelor's degree in Computer Science, Software Engineering, Computer Engineering, Electronics Engineering, or Exact Sciences.
• Another academic degree combined with at least 400 hours of professional cybersecurity training.
• An academic degree combined with relevant technological experience from an Israeli military technology unit or the Israel National Cyber Directorate.

Position Details

• Location: Central Israel
• Employment Type: Full-time
• Cloud Platform: Amazon Web Services (AWS)
• Professional Focus: Cloud Security Architecture, IAM, Multi-Account Networking, Governance, Threat Modeling, and DevSecOps

If you have deep AWS security expertise and enjoy designing secure enterprise cloud environments from architecture to implementation, we'd love to hear from you.