Cloud Infrastructure Architect, CSA-Compliance Automation, Global Services Security

DescriptionAmazon Web Services is looking for highly technical cloud infrastructure architects to join the Compliance Automation team in AWS Global Services Security (GSS) to collaborate with our customers and partners on key customer engagements. GSS is responsible for delivering product-led, people-powered services that help our customers operate their business securely on AWS, and we are accelerating our adoption of AI/ML.This is an exciting opportunity to contribute at the intersection of cloud, cybersecurity, and AI/ML. You will apply your deep technical expertise to solve complex customer challenges and develop cloud-based solutions at scale. You will guide customers through transforming their business with the combination of cultural philosophies, practices, and tools that deliver end-to-end applications and infrastructure solutions. You will have the opportunity to work with multiple lines of business and learn from (and contribute to) a variety of security use cases. This is a customer facing role. You will be required to travel to client locations and deliver professional services when needed. If you have technical depth and hands-on implementation experience of web applications, enterprise applications, HPC, batch processing and big data, archiving and disaster recovery in financial, health care, education and government industries, have a passion for security, and enjoy collaborating with our customers and partners on key engagements, please join us.Key job responsibilities

Architect and develop solutions working backwards from the customer, lead implementation projects with focus on security, deliver proof-of-concept project, and topical workshops

Comfortable rolling up your sleeves to design and code modules for infrastructure, application, and processes.

Solve specific security and business problems through automation, utilizing code, and integrating AWS-native and 3rd-party tools via API.

Align on requirements, and communicate results and recommendations both verbally and in writing. Educate our business partners about our solutions and potential opportunities.

Work closely with our Solution Architects, Data Scientists, and Service Engineering teams to drive feature innovation based upon customer needs.

Create white papers, write blogs, build demos and other reusable collateral that can be used by our customers.

A day in the lifeDiverse ExperiencesAmazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why AWSAmazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.Inclusive Team CultureHere at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness.Mentorship and Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.About the teamCompliance Automation team delivers innovative security solutions in code reducing complexity for compliance operations through automation. Utilizing broad knowledge across technology domains like security, infrastructure, data/analytics, Generative AI and AI/ML, we proactively identify areas to enhance security capabilities, and drive continuous improvements, prototyping and developing products and capabilities in-tune with industry trends and AWS best practices.We help our customers streamline and simplify compliance operations through automated solutions that launch, monitor, and visualize security controls and collect evidence of compliance, enabling efficient AWS compliance operations.About the teamCompliance Automation team delivers innovative security solutions in code reducing complexity for compliance operations through automation. Utilizing broad knowledge across technology domains like security, infrastructure, data/analytics, Generative AI and AI/ML, we proactively identify areas to enhance security capabilities, and drive continuous improvements, prototyping and developing products and capabilities in-tune with industry trends and AWS best practices.We help our customers streamline and simplify compliance operations through automated solutions that launch, monitor, and visualize security controls and collect evidence of compliance, enabling efficient AWS compliance operations.Basic Qualifications

Bachelor Degree or 5+ years of professional or military experience.

5+ years of experience as a technical specialist

Experience facilitating discussions with senior leadership regarding technical / architectural trade-offs, best practices, and risk mitigation

Direct hands-on experience deploying Landing Zone, Control Tower, Network and Web Application Firewall, Identity Management, DNS, log aggregation and monitoring solutions

Scripting and/or coding skills (Examples include but are not limited to: Java (OR) Python (OR) CloudFormation (OR) Terraform (OR) Powershell (OR) Bash)

Preferred Qualifications

Hands-on experience implementing network segmentation, IAM and KMS via IaC.

Experience in Landing Zone deployment, Control Tower, AFT/CfCT, Security Lake, OpenSearch, Quicksight, and integrations of AWS-native and 3rd-party security tools

Track record of implementing AWS services in a variety of distributed computing environments with focus on AWS Well-Architected Framework and AWS security best practices

Familiarity with policy-as-code (OPA with REGO, cfn-guard)

AWS Certification(s) such as Solutions Architect Pro, DevOps Engineer Pro, SysOps Admin, Developer Associate.

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $118,200/year in our lowest geographic market up to $204,300/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.