AWS Network Architect

AWS Network Architect Chicago IL - 3 days Onsite Overview: We are seeking an External Perimeter Security Architect for our client on a contract basis. You will lead a security architecture engagement focused on redesigning the external perimeter for both cloud and on-premises environments with the goal of reducing real risk exposure and deliver structured, milestone-based remediation plans that drive informed decisions. Responsibilities: Perimeter & Network Security Architecture Assess, redesign, and reengineer the existing external perimeter. Deliver a feasibility assessment with a phased remediation roadmap, documented in Confluence. Conduct a connection-by-connection assessment of high-risk network paths, document replacement options, and break findings into milestone-based remediation phases. Extend architecture controls across on-premise and hybrid cloud environments, ensuring operationally effective security controls that minimize friction for the business. AWS Security Hardening Design and implement SCPs, Resource Policies, and VPC Endpoints to enforce isolation Harden IAM controls and access patterns through guardrails Configure data flow controls and encryption in transit/at rest Work across multiple AWS accounts with an ability to prioritize and scale remediation Embed AI-augmented tooling into architecture review workflows CI/CD & Infrastructure-as-Code Security Evaluate and harden CI/CD pipeline architecture and IaC configurations Ongoing Architecture Review Maintain correctness throughout the change lifecycle Establish segmentation and zero-trust enclaves to contain blast radius Map findings to TTPs to support early detection before remediation is complete Identify and prioritize key operational risks surfaced during the engagement Qualifications: Required Qualifications: Deep knowledge of traditional network security and SD-WAN Zero trust architecture AWS security configuration and best practices across cloud-native services (Control Tower, Security Hub, Config, Guardduty) Cloud networking, integration patterns, and cross-account security management Data encryption — at rest and in flight Preferred Qualifications: Privileged Access Management fundamentals CI/CD pipeline security using third-party tools (Ansible, Jenkins, or similar) Hands-on experience with AI coding agents (e.g., Claude Code, OpenAI Codex, Gemini CLI) — professional or personal