AWS Cloud Security Architect

We are looking for a Cloud Security Architect who knows Amazon Web Services (AWS) security inside and out and wants to build, not just advise.

You will design and help build the AWS environment that runs our software-as-a-service (SaaS) platform, working shoulder to shoulder with our developers and infrastructure engineers. You will own the security of every layer: identity, networks, containers, storage, encryption, and logging.

The banks and wealth managers who use our platform trust us with their clients’ financial lives, and your work is a big part of why they can.

What you will do

• Design the security architecture for our AWS environment and take part in every stage of design and build alongside our development and infrastructure teams.
• Set and maintain secure baselines for identity and access, network and firewall controls, containers and Kubernetes, storage, encryption, key management, and cryptography.
• Design security logging and monitoring so we can see and investigate activity across every AWS account and workload.
• Review cloud designs and changes and provide clear, practical answers that keep projects moving.
• Build guardrails and automated checks that stop insecure configurations before they reach production.
• Partner with our Application Security Architect to use Wiz to find and fix cloud risk, from code to runtime.
• Write the reference architectures and patterns that let teams build securely without waiting on security.
• Mentor engineers across the company.

What success looks like in your first year

• Every new service we run in AWS is secure from day one, not fixed later.
• Developers and infrastructure engineers bring you into their designs early because your involvement makes their work faster and better.
• Our AWS environment runs to a written secure standard, and anything that drifts from it is caught and corrected quickly.
• We can prove to customers, auditors, and regulators that our platform runs on secure infrastructure.

What you bring

• Typically eight or more years of experience in security engineering or architecture, with at least five focused on hands-on AWS security in multi-account environments.
• Expert knowledge of AWS identity, including IAM, AWS Organizations, service control policies, and IAM Identity Center.
• Expert knowledge of AWS networking, including VPC design, security groups, AWS Network Firewall, and AWS WAF.
• Expert knowledge of encryption, including KMS, CloudHSM, and certificate management.
• Strong container security experience with Amazon EKS or ECS, including image security, runtime protection, and least-privilege workload identity.
• Experience designing security logging with CloudTrail, VPC Flow Logs, GuardDuty, Security Hub, and a central log platform.
• A working command of cryptography, including choosing the right algorithms, rotating keys, and protecting secrets.
• Infrastructure as code skills in Terraform or CloudFormation, along with the ability to read and write code.
• Experience securing a SaaS platform for regulated customers, ideally in financial services.
• The ability to explain complex risk in plain language to engineers and executives alike.

Bonus points

• Microsoft Azure or Microsoft 365 security experience.
• Hands-on experience with Wiz or a similar cloud security platform.
• AWS Certified Security Specialty certification, or equivalent depth of experience.

Who you are

• You hold yourself to a world-class standard, and it shows in everything you deliver.
• You are a self-starter. You find the work that matters and finish it without being asked.
• You care about this field beyond the job description. You keep learning and building on your own because you enjoy it, and you put in the extra effort when the mission calls for it.
• You bring drive, ambition, and a positive attitude to hard problems.
• You make the people around you better. You share what you know, you never make anyone feel small, and you let your work speak for itself.

How we work

Our security team spans the United States, Romania, and India and protects the platforms that banks and wealth managers rely on every day. We hold a high bar, and we hold it together.

The people on this team own their work from start to finish, keep learning because they want to, and make the people around them better. We do not reward the loudest voice in the room. We reward the best work, delivered with respect for the people it affects.

**About Inve…