Toutes les offres
CDI

8 juillet 2026

WhatsApp

AWS Cloud Security Architect

Neoshore Madagascar

Antananarivo

Rejoignez Neoshore Madagascar, une entreprise de services IT en pleine croissance, en tant qu'AWS Cloud Security Architect. Contribuez à la conception et à l'implémentation d'architectures cloud sécurisées pour des clients européens.

Missions

Design and implement the AWS organisation: account structure and OUs, guardrails (SCPs), centralised logging and billing, aligned with AWS Well-Architected and security best practices. Least-privilege IAM design: roles over long-lived keys, instance profiles for workloads, conditional access policies, joiner/leaver and key-rotation procedures. VPC design and isolation, network ACLs and security groups, secure connectivity to external partners (SSM Session Manager, bastion-less access patterns, proxying). Immutable, versioned, cross-account backup architecture (S3 Object Lock, lifecycle policies) with defined RTO/RPO and tested restores, plus a documented DR plan. GuardDuty, CloudTrail, Config, alerting (SNS), billing-anomaly detection; patching and maintenance via SSM. Site-to-site VPN configuration and hybrid network connectivity (AWS Site-to-Site VPN, IPsec tunnels, routing, VPC-to-on-premise/partner network integration).

Profil recherché

8+ years in cloud/infrastructure engineering, with deep AWS specialisation and a strong security orientation. Current AWS certification required: AWS Certified Solutions Architect (Professional) and/or AWS Certified Security (Specialty). Associate-level certifications alone are insufficient for this seniority. Proven delivery of multi-account AWS foundations (Organizations, Control Tower or equivalent, SCPs) - not just single-account setups. Verifiable references from at least two comparable missions. Additional certifications: AWS Advanced Networking Specialty, GCIH, OSCP. Experience in regulated financial environments (DORA, ISO 27001). Multi-cloud exposure (DigitalOcean or similar).

Compétences
Expert-level IAM: policy authoring
permission boundaries
conditional logic
migration away from static credentials.
Strong AWS networking (VPC
endpoints
hybrid access) and SSM (Session Manager
Patch Manager
port forwarding).
Backup/DR architecture with tested-restore discipline (S3 versioning
Object Lock
cross-account replication).
Solid Terraform skills.
Solid Linux (Ubuntu) administration.
Informations

CDI

Antananarivo

8 ans d'expérience

Date limite : 7 août 2026


Se connecter pour postuler