Security Architect - Remote

Situs

AMC is where the best and most passionate people come to transform our client’s businesses and their own careers. Whether you’re a real estate veteran, a passionate technologist, or looking to get your start, join us as we work together to realize opportunities for everyone, we proudly serve.

At Situs

AMC, we are looking to match your unique experience with one of our amazing careers, so that we can help you realize your potential and career growth within the Real Estate Industry. If you are someone who can be yourself, advocate for others, stay nimble, dream big, own every outcome, and think global but act local – come join our team!

This role will support the design, implementation, and continuous improvement of security architecture across AWS and Microsoft Azure environments, enterprise applications, and infrastructure platforms. This role will focus on improving cloud security posture, hardening identity and privilege models, integrating security into SDLC pipelines, and reducing attack surface across infrastructure and applications.

• Support the implementation of secure architecture patterns across AWS and Microsoft Azure environments
• Support deployment and operationalization of CNAPP/CSPM platform
• Drive cloud security posture improvements by integrating CNAPP with Cloud-native tools (e.g., Guard Duty, Security Hub, IAM, KMS, Cloud Trail) and Azure security capabilities
• Partner with Security Operations to automate and integrate with MSSP and SOAR automation response principles
• Partner with engineering and development teams to embed application security (App Sec) controls into development and deployment pipelines
• Lead and support vulnerability management and patching programs across infrastructure and applications
• Contribute to security architecture reviews, threat modeling, and design validation
• Support implementation and optimization of IAM, PAM, and least-privilege access models
• Collaborate with Sec Ops team to integrate telemetry into SIEM platforms for monitoring and detection
• Support in the development and maintainance of secure configuration baselines and reference architectures
• Help drive patching strategy for servers, endpoints, and cloud workloads
• Conduct architecture reviews and document security requirements
• Partner directly with engineering leaders to bake security into product roadmaps.
• Stay up-to-date with the latest security trends, threats, and technologies to continuously improve our security posture.
• Help drive a culture of zero trust security across engineering, development, and product teams.

• Bachelor’s degree in a technical field from an accredited college/university, or equivalent job experience.
• Minimum of 6+ years of industry and/or relevant experience, typically with 1+ years in a Senior Associate level role or external equivalent.
• Experience in cybersecurity, cloud security, or security engineering, including demonstrated experience operating at a senior or lead level.
• Relevant certifications such as CISSP, CEH, GIAC, ISSAP or other relevant security-focused certifications preferred.
• Hands‑on experience securing AWS and/or Azure environments.
• Working knowledge of CNAPP/CSPM platforms
• Experience with vulnerability scanning, remediation tracking, and patch management processes
• Familiarity with application security principles (SAST, DAST, secure SDLC, threat modeling)
• Experience with IAM, PAM, and access governance concepts
• Exposure to SIEM and security monitoring integration
• Knowledge of Zero Trust architecture principles
• Understanding of network segmentation, VPN, Conditional Access, and cloud networking fundamentals
• Proficiency in scripting and automation (e.g., Python, Power Shell, Terraform)
• Familiarity with container security technologies (Docker, Kubernetes) and infrastructure as code (IaC) tooling
• Knowledge of encryption and key management practices.
• Strong communication skills and ability to work with both technical and non-technical stakeholders.
• Highly motivated self-starter that can manage multiple deliverables independently in a fast-paced environment

#LI-AS1 #LI-REMOTE

Note:

This job description is not intended to be all…