Solution Architect

Job Description

• Cloud Security & Compliance:
  Deep expertise in AWS security controls, IAM, SCPs, and compliance frameworks relevant to financial services.
• Solution Design:
  Proven ability to design scalable, secure architectures and translate business requirements into technical solutions.
• Technical Leadership:
  Experience leading cross‑functional teams, conducting stakeholder workshops, and presenting architectural decisions to both technical and non‑technical audiences.
• Dev Ops & Automation:
  Hands‑on experience with Terraform, CI/CD pipelines, and automation of cloud infrastructure.
• Communication:
  Strong documentation, presentation, and stakeholder management skills.

• Cloud Security & Compliance:
  Deep expertise in AWS security controls, IAM, SCPs, and compliance frameworks relevant to financial services.
• Solution Design:
  Proven ability to design scalable, secure architectures and translate business requirements into technical solutions.
• Technical Leadership:
  Experience leading cross‑functional teams, conducting stakeholder workshops, and presenting architectural decisions to both technical and non‑technical audiences.
• Dev Ops & Automation:
  Hands‑on experience with Terraform, CI/CD pipelines, and automation of cloud infrastructure.
• Communication:
  Strong documentation, presentation, and stakeholder management skills.

• Cloud Security & Compliance:
  Deep expertise in AWS security controls, IAM, SCPs, and compliance frameworks relevant to financial services.
• Solution Design:
  Proven ability to design scalable, secure architectures and translate business requirements into technical solutions.

• Bachelor’s or Master’s degree in Computer Science, Engineering, or related field.
• Relevant certifications (e.g., AWS Certified Solutions Architect, TOGAF, CISSP) are highly desirable.
• 10+ years of experience in IT, with at least 5 years in cloud architecture and security roles.

• Assessment & Roadmap Development:
  Lead discovery and assessment of current AWS accounts, IAM roles, SCPs, and Terraform modules. Identify security gaps and develop a phased implementation roadmap in collaboration with stakeholders.
• Security Policy & Control Design:
  Design and validate Service Control Policies (SCPs) to enforce least privilege, root user lockdown, and IP whitelisting. Ensure policies are tested in non‑production environments before rollout.
• IAM Role Management:
  Audit and refactor IAM roles to eliminate over‑permissioning, deprecate shared roles, and implement least‑privilege, function‑specific access with clear permission boundaries.
• Break‑Glass Access:
  Develop and document secure, auditable break‑glass access procedures, including MFA enforcement, time‑bound access, and approval workflows.
• Infrastructure as Code (IaC):
  Review and update Terraform modules to ensure secure‑by‑default configurations, including encryption, tagging, and logging. Oversee peer reviews and validation in staging environments.
• Testing & Validation:
  Lead functional and negative testing of IAM and SCP changes, ensuring compliance with security benchmarks and operational requirements.
• Production Rollout & Documentation:
  Oversee deployment of validated controls and modules to production, monitor for anomalies, and ensure comprehensive documentation and knowledge transfer.

Salary Range: $120,000 – $145,000 a year

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage:
  Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support:
  Maternal & Parental Leaves.
• Insurance Options:
  Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth:
  Commuter Benefits & Certification & Training Reimbursement.
• Time Off:
  Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance:
  Legal Assistance, 401(k) Plan, Performance Bonus, College Fund, Student Loan Refinancing.