SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Megazone Cloud US, an AWS Premier Tier Services Partner, is seeking a Cloud Architect to serve as the architecture and security authority within a major automotive enterprise client's Cloud Center of Excellence (CCoE). You will be responsible for setting standards for how AWS accounts are built and secured across approximately 155 cloud accounts spanning AWS, Azure, and Google Cloud.
In this role, you will own the landing-zone and account architecture standards, including account structure, organizational units, networking, identity, logging, and guardrails. You will review business-unit architectures and change requests, approving, rejecting, or improving them against established standards. Security architecture ownership is central to the position: you will establish and enforce IAM and least-privilege policies, encryption standards, boundary protection, secrets handling, and security baselines across the estate.
You will drive vulnerability and compliance posture using AWS security services (Security Hub, GuardDuty, Config, Inspector) and coordinate remediation efforts through the operations team. You will produce reference patterns and documentation that platform and operations engineers build from, and serve as the senior technical escalation point for architecture and security incidents. A significant part of your role involves explaining architecture and risk decisions to Korean-speaking client and headquarters stakeholders, both in writing and in meetings.
The position is based onsite at the client site in Irvine, CA, with core hours during US Pacific business hours. However, the role includes regular evening and early-morning work for recurring calls with Megazone HQ and client teams in Korea (KST is 16 hours ahead of Pacific), plus planned maintenance windows outside standard business hours. You will also serve as a senior escalation point for out-of-hours incidents.
Work is delivered through a documented ITIL-style process with tickets, change control, runbooks, and post-incident reviews. You must be authorized to work in the US, able to pass client background screening, and able to work within a SOC 2 control environment.
REQUIREMENTS:
- 7+ years in cloud infrastructure, including 4+ years designing on AWS at enterprise scale (multi-account, multi-VPC)
- Demonstrable ownership of an AWS multi-account landing zone (Control Tower or equivalent custom build), including guardrails and account vending
- Deep AWS security expertise: IAM policy design, SCPs, KMS, VPC security architecture, centralized logging, and AWS security services
- Track record of governing other teams' designs: architecture review, standards enforcement, and constructive decision-making
- Professional working fluency in Korean and English
- Able to work onsite in Irvine, CA
NICE TO HAVE:
- AWS Solutions Architect Professional or Security Specialty certification
- MSP or consultancy background
- Automotive, manufacturing, or Korean-affiliated enterprise experience
- SOC 2 / ISO 27001 / NIST control mapping knowledge
- Working knowledge of Azure and Google Cloud security
