Security Engineer / Architect

Join Amynta Group as a Security Engineer / Architect and take ownership of enterprise-wide security across cloud, network, application, and infrastructure domains. This is a full-time position based in the United States where you'll design and implement critical security controls that protect organizational assets in an evolving threat landscape.

What This Role Involves

In this position, you'll take a cross-functional approach to enterprise security, serving as a key technical resource for designing, implementing, and maintaining defensive measures. You'll work alongside infrastructure, development, and IT security teams to establish security standards, evaluate emerging risks, and oversee the execution of security remediation initiatives across multiple technology domains.

What You'll Do

• Deploy and maintain security guardrails in AWS, Azure, and GCP environments, using cloud security posture management platforms to identify and remediate configuration issues
• Audit cloud configurations for compliance and ensure proper governance, IAM policies, and resource permission management
• Architect secure cloud solutions that meet hybrid and cloud-native security requirements
• Oversee network security architecture including firewall strategy, intrusion detection and prevention systems, VPN infrastructure, and network segmentation controls
• Review network security configurations and rule sets to ensure consistency with organizational standards and security principles
• Perform network infrastructure vulnerability assessments and coordinate remediation efforts across the organization
• Establish zero-trust network principles and enforce access control policies organization-wide
• Lead adoption of secure development practices throughout the software development lifecycle
• Create and maintain security standards and guidelines for development teams to follow
• Execute application security assessments and work with development teams on vulnerability prioritization
• Lead infrastructure security remediation workstreams including system patching, hardening, and logging improvements
• Own the complete lifecycle of managing security findings from initial assessment through validation and change control under infrastructure leadership
• Harden Windows and Linux systems with particular focus on critical services such as Active Directory, Exchange, and DNS
• Manage patch compliance across the infrastructure portfolio and track remediation progress
• Assess security practices related to AI system deployment and usage across the organization
• Define data and SQL database security practices, including access controls, query validation, and protection against injection-based attacks
• Develop and maintain security standards documentation and operational runbooks for infrastructure teams to ensure ongoing compliance

What We're Looking For

Required qualifications:

• 3 to 5 years in information security or security engineering roles
• Practical experience with network security tools such as firewalls, IDS/IPS systems, VPNs, and network monitoring solutions
• Knowledge of application security principles, including OWASP Top 10 vulnerabilities and common attack vectors
• Background securing production workloads in AWS, Azure, or Google Cloud Platform
• System administration skills across Windows and Linux operating systems, including hardening practices
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, or Elastic Stack
• Strong foundation in authentication technologies, TLS/SSL, PKI, and identity and access management
• Ability to communicate security concepts and risk assessment findings to both technical and business stakeholders

Preferred qualifications:

• Industry certifications including Security+, CEH, OSCP, AWS Security Specialty, or CISSP Associate
• Exposure to DevSecOps methodologies and security integration within CI/CD workflows
• Familiarity with NIST CSF, ISO 27001, SOC 2, or CIS Benchmarks compliance frameworks
• Automation and scripting capability using Python, PowerShell, or Bash
• Hands-on experience with endpoint detection and response (EDR) solutions

About the Company

Amynta Group is committed to fostering an inclusive workplace and provides equal employment opportunities to all applicants and employees regardless of protected characteristics. The company is dedicated to removing barriers in the recruitment process and will provide reasonable accommodations to candidates with disabilities as required by applicable laws.

Applying for This Role

To apply, complete your application directly on this page, or you'll be redirected to the employer's application platform to finish submitting there.