Role Overview
We are seeking a Senior Solution Architect to lead the technical design and execution of a strategic, AI-driven cybersecurity initiative [cite: 3]. This program aims to automate the remediation of enterprise cryptographic vulnerabilities across a portfolio of ~200 applications using autonomous LLM agents [cite: 3].
Operating initially within an isolated InfoVision AWS Sandbox before scaling to enterprise production, you will be the definitive technical authority driving this initiative [cite: 3, 4]. You will architect the multi-agent orchestration pipeline, integrate Large Language Models (LLMs), and ensure the seamless translation of enterprise security rules into executable Infrastructure-as-Code (IaC) templates [cite: 3]. This role requires a hands-on architectural leader who can bridge the gap between DevSecOps, Cloud Infrastructure, and Generative AI to deliver a scalable, long-term solution.
1. AI & Agentic Orchestration Architecture
Design the Agent Pipeline:
Architect cyclic graph-based state machines using LangGraph on AWS ECS Fargate, defining clear handoffs between the Scan, Classify, Plan, and Execute agents.
LLM Integration:
Oversee the integration of Amazon Bedrock and LLM APIs (Claude and Gemini), designing prompt structures and context-management logic to parse complex Software Bills of Materials (SBOM) and Cryptography Bills of Materials (CBOM).
RAG Implementation:
Architect a Retrieval-Augmented Generation (RAG) system using OpenSearch vector search to dynamically map scan findings against the established North Star rule dictionary.
2. Cloud Infrastructure & Security Design
Infrastructure Architecture:
Design and govern a secure AWS environment, including VPC, IAM, and CloudWatch, initially isolating the development sandbox and eventually scaling it into production-ready pipelines.
State & Approval Management:
Architect the state-management layer using DynamoDB to track remediation checkpoints and workflow progress.
Design the Reviewer Dashboard using Amazon API Gateway, AWS Lambda, and Amazon Cognito to enforce human-in-the-loop approval workflows.
CI/CD & DevOps Integration:
Oversee offshore AWS Cloud and DevOps engineers responsible for building automated execution pipelines using AWS CodeBuild, AWS Systems Manager (SSM), and Git-based pull request automation.
3. Technical Strategy & Template Governance
Rule-to-Template Mapping:
Own and govern the baseline mapping table, translating characteristic maps provided by the on-site data analysis team into logical frameworks required for Infrastructure-as-Code (IaC) remediation templates.
Vulnerability Simulation & Testing:
Guide the engineering team in accurately introducing industry-standard cryptographic vulnerabilities, such as TLS 1.2 configurations, AES-128 encryption, and hardcoded secrets, into reference applications to simulate real-world security scenarios during the initial development phase.
Cross-Functional Technical Alignment:
Serve as the technical bridge between the on-site security analysis teams and offshore AI engineering teams, ensuring that AI agents are designed and implemented to address the correct enterprise security requirements and technical constraints.
Required Qualifications
Experience:
10+ years of progressive experience in Cloud Architecture, Software Architecture, and enterprise technology solutions.
AWS Mastery:
Deep, demonstrable expertise in AWS networking, compute services (ECS/Fargate), and serverless and managed services, including DynamoDB, OpenSearch, API Gateway, and Lambda.
AWS Certified Solutions Architect – Professional certification is highly preferred.
Generative AI:
Hands-on architectural experience with Generative AI orchestration frameworks, including LangGraph and LangChain, and LLM APIs such as Amazon Bedrock, Claude, and Gemini.
DevSecOps:
Strong foundation in DevSecOps practices, Infrastructure-as-Code (IaC) using Terraform, and automated security remediation pipelines.
Security Acumen:
Ability to understand complex enterprise encryption standards and protocols, including TLS, IPsec, AES-256, and translate them into secure infrastructure configurations and remediation strategies.
