Senior Security Consultant – AWS Cloud Architecture

About the role

AWS Cloud Architect responsible for designing, building, and owning the complete AWS foundation for Gruve's Cisco ISE-as-a-Service (ISEaaS) multi-tenant managed service, with 8+ years of experience in cloud infrastructure and network security environments. Owns the AWS Organization and multi-account landing zone, tenant network architecture, security guardrails, Infrastructure-as-Code, and cloud cost management.

What you'll do

• Design and implement multi-account AWS Organization structure, including Organizational Units (OUs), management account separation, and consolidated billing
• Design and enforce Service Control Policies (SCPs) and organization-level guardrails for tenant isolation and compliance
• Design tenant network architecture: VPC, multi-AZ subnet design, route tables, VPC endpoints, NAT, DNS (Route 53 private zones including PTR records)
• Design, implement and maintain centralized AWS egress architectures using AWS Network Firewall
• Implement AWS Transit Gateway hub-and-spoke connectivity with per-tenant route tables, Site-to-Site VPN, and Direct Connect

What you need

• 8–14 yrs of experience
• AWS
• Network security
• Terraform
• Networking
• IAM
• Firewalls
• Any graduate

Good to have

• Git
• Ansible
• Azure
• Kubernetes
• CI/CD
• ACLS