AWS Security Architect (Senior Specialist - Architecture)

About the Role

This position involves setting up and operationalizing AWS Security Agents, conducting penetration testing, designing multi-account security guardrails, IAM/SSO policy design, and authoring organizational security requirements. The role requires leadership in threat modeling (STRIDE/PASTA), security reviews, and AWS Backup with logical air-gap design. Strong experience in financial services security and deep regulatory knowledge of NIST CSF, DORA, PCI DSS, and SEC cyber rules is required.

Responsibilities

• Lead WS1 Security Agent design and access control model.
• Author DTCC-aligned custom security requirements and validate penetration testing findings.
• Configure IAM Identity Center SSO, IAM deny policies, and least-privilege SCP guardrails per Agent Space.
• Author Security Agent Architecture Design Document and operational runbooks.
• Lead WS4 Threat Modeling, providing inputs during customer-led STRIDE/PASTA workshops across up to 15 AWS services.
• Produce threat registers and prioritized security control backlogs.
• Assist with design and implementation of Amazon EKS security baseline and lab environment.
• Review customer organizational security requirements and incorporate them into AWS deliverables.
• Validate implementation against DTCC security standards.

Requirements

• Financial services security experience (strongly preferred).
• Deep regulatory security knowledge (NIST CSF, DORA, PCI DSS, SEC cyber rules).

Benefits

• Comprehensive medical plan covering medical, dental, and vision.
• Short-term and long-term disability coverage.
• 401(k) plan with company match.
• Life insurance.
• Vacation time, sick leave, and paid holidays.
• Paid paternity and maternity leave.

Pay

The range displayed reflects the minimum and maximum salary target for the position across all US locations. Individual pay is determined by work location, job level, and additional factors including job-related skills, experience, and relevant education or training. Other forms of compensation may include an annual performance-based bonus, sales incentive pay, or other variable compensation.