AWS Cloud Security Architect

Hexa Consulting is looking for an AWS Cloud Security Architect to join our Client's team in a hybrid work model from Lisbon or Porto.

Job Details

Lisbon or Porto, Portugal | Hybrid: 1 day per week at the office | Aviation Sector

Mandatory Requirements

• Extensive professional experience designing and implementing AWS cloud security architectures in complex enterprise environments.
• Proven ownership of cloud security architecture decisions, technical implementation and delivery.
• Strong hands-on experience with Terraform, Python and infrastructure automation.
• Experience designing and securing large-scale, multi-account AWS environments.
• Solid knowledge of AWS Identity and Access Management (IAM), access controls and cloud landing zones.
• Experience implementing security-as-code, policy-as-code and automated security controls.
• Strong understanding of DevOps practices, CI/CD security integration and cloud platform engineering.
• Experience with cloud security monitoring, threat detection, vulnerability management and security controls.
• Ability to translate security architecture requirements into scalable, maintainable engineering solutions.
• Strong technical judgment, autonomy, accountability and collaborative leadership skills.
• English proficiency at C1 level.

Nice to Have

• Experience implementing cloud security solutions in regulated industries.
• Knowledge of cybersecurity requirements within the aviation sector.
• Exposure to security considerations for Artificial Intelligence and Large Language Models (LLMs).
• Experience with advanced security detection capabilities.
• Familiarity with cloud platforms beyond AWS.
• Previous involvement in platform engineering initiatives.

Technology Stack

• Cloud Platform: Amazon Web Services (AWS), Multi-Account Architecture, Cloud Landing Zones.
• Identity & Access: AWS IAM, Access Control, Cloud Security Governance.
• Infrastructure-as-Code: Terraform.
• Programming & Automation: Python, Security-as-Code, Policy-as-Code.
• DevOps & CI/CD: Continuous Integration, Continuous Delivery, Pipeline Security.
• Security Operations: Cloud Logging, Security Monitoring, Threat Detection, Vulnerability Management.
• Platform Engineering: Reusable Infrastructure Components, Cloud Security Architecture Patterns.

Key Responsibilities

• Define and deliver secure, scalable AWS cloud architectures and reusable security controls.
• Design secure cloud foundations covering governance, identity and access management, monitoring and threat detection.
• Translate technical security requirements and regulatory obligations into practical cloud infrastructure controls.
• Develop automated security solutions using Infrastructure-as-Code, policy-as-code and CI/CD pipelines.
• Evaluate cloud security technologies and define appropriate integration strategies.
• Implement engineering solutions that strengthen security consistency, operational efficiency and platform resilience.
• Provide architectural guidance and technical leadership to engineering teams and external partners.
• Integrate security practices into cloud platform engineering, DevOps workflows and software delivery processes.
• Promote continuous improvement, automation and high-quality security engineering practices.

What We Offer

• Work Model: Hybrid, with 1 day per week at the office in Lisbon or Porto.
• A culture where each person is encouraged to act as a Builder, contributing with ownership, responsibility and impact.
• A collaborative environment built on Honesty, Mutual Support and Agility.
• Continuous learning and certification support throughout your journey.
• Private health insurance from day one, with optional family extension.
• Confidential mental health support through TEAM 24, including psychological support, content and live sessions.
• Childcare vouchers and practical family support measures.
• Opportunities to grow through exposure to quality management, information security, AI governance and cybersecurity best practices.

Equal Opportunity

Hexa is committed to equal opportunity, inclusion and fair access to professional growth. We value diverse backgrounds, perspectives and experiences, and we support the principles of the Portuguese Diversity Charter in the way we build teams and opportunities.

Hexa Life

Life at Hexa means being part of a community of Builders. We work with transparency, support each other across projects and geographies, and stay focused on learning, adapting and delivering work that creates real impact.

If you meet the above criteria and are ready for an exciting opportunity in a dynamic environment, please send your CV!