AWS Cloud Security Architect

COMBLACK is hiring an AWS Cloud Security Architect !

Lead the security and infrastructure architecture of AWS Landing Zones in a Multi-Account environment. The role includes designing advanced identity and access policies, managing network and perimeter security, leading cloud Threat Modeling processes, and defining secure cloud infrastructure architectures through HLD and LLD documentation.

What are we looking for?

• At least 4 years of experience within the last 5 years managing identities and advanced access policies, including IAM, Policy Evaluation, and Resource Policies.
• At least 4 years of experience within the last 5 years implementing and operating AWS security and monitoring tools such as GuardDuty, Security Hub, CloudTrail, Config, and WAF.
• At least 4 years of experience within the last 5 years conducting cloud Threat Modeling, identifying attack vectors, and defining preventive security controls.
• At least 4 years of experience within the last 5 years designing Hub & Spoke network topologies using Transit Gateway and hybrid connectivity solutions (Direct Connect / VPN).
• Strong command of Infrastructure as Code (IaC) using CloudFormation.
• Experience managing AWS security services, including KMS, Secrets Manager, ACM, SSM, and ECR.
• Proven hands-on experience writing engineering architecture documents (HLD / LLD).

Why Comblack?

Comblack is a company dedicated to creating accurate and meaningful connections between people and the right opportunities. We believe in a personal approach, uncompromising professionalism, and true end-to-end support, for both candidates and clients. At Comblack, you’ll find a dynamic, supportive, and innovative work environment that encourages initiative, growth, and continuous professional development.