CLOUD ARCHITECT - AWS Cloud Security

Job Description

· Partner with application teams to assess the design and security requirements of their applications. Assist with all security related migration activities

· Submitting firewall, access, tooling, policy exception requests on behalf of the app team to ensure requests are valid and within Fairview requirements to remove unnecessary delays.

· Assist in preparation of application architecture and drive solutions to address security concerns by working across IT teams and with vendors

· Conduct security assessments of applications and infrastructure migrating to AWS.

· Review workload architecture, connectivity, privileged access, service accounts, authentication, and authorization models.

· Assess network security controls, including security groups, firewall rules, segmentation, and application communication flows.

· Evaluate vulnerability management, patching practices, operating system hardening, and security configurations.

· Review encryption, data protection, logging, monitoring, and threat detection capabilities.

· Identify security risks, technical debt, and modernization opportunities during migration activities.

· Distinguish application-specific security findings from recurring or platform-wide security issues.

· Partner with Cloud Engineering teams to enhance reusable Terraform modules, Infrastructure-as-Code standards, IAM frameworks, security guardrails, monitoring solutions, and security policies.

· Collaborate with Cyber Security Engineering, Enterprise Architecture, Risk & Governance, Application Teams, Network Engineering, and SI partners to drive secure cloud adoption.

· Establish ownership and remediation plans for security findings that cannot be addressed during migration.

· Track recurring findings and recommend platform-level improvements to improve security maturity across the migration program.

· Support implementation of security best practices aligned with AWS Well-Architected Framework and Fairview security standards.

· Contribute to continuous improvement initiatives that enable future migrations to be more secure, standardized, and operationally efficient.

FHSRIS01-13-1