Cloud Security Architect - AWS WAF & Firewall Specialist

Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Web Application Firewall (WAF), Amazon Web Services (AWS) Security
Good to have skills : NA
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
As a Senior AWS WAF / AWS Firewall Engineer should be aligned with enterprise security operations, managed services, and cloud-scale environments, which should fit well for senior roles in large organizations. The responsibilities and skills are grounded in commonly published AWS WAF / Firewall job requirements

Roles & Responsibilities:
- Expected to be an SME, collaborate and manage the team to perform.
- AWS WAF & Application Security Design, implement, and manage AWS WAF protections for CloudFront, Application Load Balancer (ALB), and API Gateway.
- Create, tune, and maintain custom WAF rules, managed rule groups, rate-based rules, and bot control policies.
- AWS Firewall & Network Security
- AWS Firewall & Network Security
- Implement and manage AWS Network Firewall and AWS Firewall Manager for centralized security policy enforcement.
- Define firewall policies, rule groups, and traffic filtering across multi-account AWS environments.
- Work closely with network and cloud teams to secure VPC architectures and ingress/egress traffic.
- Implement and manage AWS Network Firewall and AWS Firewall Manager for centralized security policy enforcement.
- Define firewall policies, rule groups, and traffic filtering across multi-account AWS environments.
- Work closely with network and cloud teams to secure VPC architectures and ingress/egress traffic.
- Threat Detection, Monitoring & Incident Response
- Monitor security events using SIEM tools (e.g., Splunk) and AWS logging services.
- Perform real-time incident response, including rapid rule updates and traffic mitigation during active attacks.
- vSupport forensic analysis and post-incident reviews.ronments.
- Work closely with network and cloud teams to secure VPC architectures and ingress/egress traffic.
- Automation & DevSecOps
- Automate WAF and firewall deployments using Infrastructure as Code (Terraform / CloudFormation).
- Integrate security controls into CI/CD pipelines and SDLC processes.
- Enforce security guardrails using AWS Firewall Manager at scale.
- Governance & Collaboration
- Partner with application, DevOps, and platform teams to embed security-by-design.
- Contribute to security standards, runbooks, and operational documentation.
- Mentor junior engineers and act as an SME for AWS application security.

Professional & Technical Skills:
- Must To Have Skills: Proficiency in Web Application Firewall (WAF), Amazon Web Services (AWS) Security.
- Strong knowledge of cloud security architectures and best practices.
- Strong hands-on experience with:AWS WAF
- Strong hands-on experience with:AWS Firewall Manager
- Strong hands-on experience with:AWS Network Firewall
- Strong hands-on experience with:AWS Shield (preferred)

Additional Information:
- The candidate should have minimum 5 years of experience in Web Application Firewall (WAF).
- This position is based at our Mumbai office.
- A 15 years full time education is required.
- .Bachelors and above degree in Computer Science, Information Technology, MIS, Engineering / Bachelor or college degree in related field or equivalent work experience (Full time).
- The candidate should have minimum 10+ years of experience in AWS WAF & AWS Network Firewall.
- Good to have certification on AWS Certified Security – Specialty