Solutions Architect - MIT

- Lead the creation and validation of cloud security controls and ensure compliance with healthcare regulations under the guidance of the Cybersecurity team - Mitigate risk using secure reference architectures, guardrails, and automated checks integrated into pipelines, while ensuring adherence to standards like CIS - Design AWS Organizational Governance, including Service Control Policies (SCP) and multi-account configurations - Establish foundations for Logging & Audit, utilizing CloudTrail, AWS Config, and other security tools - Oversee CSPM/CNAPP Operations, integrating account/resource onboarding, refining policies, and collaborating with ticketing and logging systems - Implement Infrastructure as Code practices using Terraform, including reusable patterns and policy integration - Prioritize vulnerability and risk assessments based on a combination of severity logic - Automate and script using Python (boto3), AWS CLI, and related tools for validation, reporting, and evidence export - Develop identity and access management strategies while ensuring least privilege principles are followed - Collaborate with the Cyberteam to review solution designs, perform threat modeling, and map compliance requirements to cloud-native services - Define and implement data security patterns, including classification, encryption, and logging mechanisms - Maintain network security by integrating advanced patterns such as private endpoints and zero-trust access - Embed security protocols into CI/CD processes and select cloud security tools for enhanced protection - Author and manage cloud security policies and standards, facilitating ongoing adherence and remediation of gaps