Associate Principal AWS Security Architect

Job Locations US-CO-Greenwood Village
ID
2025-5997
Category
Information Technology
Type
Full Time

Benefits Overview

A career at CoBank can offer you the opportunity to make a personal impact on the people and communities where we do business. When you choose a career with CoBank, you make a difference by standing for something that matters. In order to be the best, we hire the best!

Remarkable Benefits Offered by CoBank

  • Careers with a purpose.
  • Time-Off Packages, 15 days of vacation, 10 paid sick days and 11 paid holidays
  • Competitive Compensation & Incentive
  • Hybrid work model: flexible arrangements for most positions
  • Benefits Packages, including Medical, Dental and Vision coverage, Disability, AD&D, and Life Insurance
  • Robust associate training and development with CoBank University
  • Tuition reimbursement for higher education up to $10K
  • Outstanding 401k: up to 6% matching and additional 3% non-elective contribution
  • Community Impact: United Way Angel Day, Volunteer Day and Associate Directed Contribution
  • Associate Resource Groups: creating a culture of respect and inclusion
  • Recognize a fellow associate through our GEM awards

 

Job Description

We are seeking a highly skilled and experienced Associate Principal AWS Security Architect to join our infrastructure security team. The Candidate must have in depth, hands on, AWS development and AWS security experience, ideally in financial services or other highly regulated industry. This role involves leading the security of our AWS infrastructure, identifying and mitigating security risks, and ensuring compliance with industry regulations. The successful candidate will play a crucial role in enhancing the security posture of our organization while leveraging advanced AWS and third-party technologies to protect sensitive financial data. They will also be responsible for mentoring more junior staff and peers in AWS.

Essential Functions

1. Ensures AWS security is integrated into each step of development by collaborating with IT Architects.
2. Implements and enforces security policies, standards, and best practices to ensure compliance with industry regulations and internal security requirements. Conducts regular security audits.
3. Implements and maintains security configurations for AWS services including IAM, VPC, CloudTrail, and Security Hub.
4. Performs critical analysis of security controls in CI/CD pipelines to determine appropriate implementation contexts, including when to apply, exempt, or customize controls (e.g., AWS KMS CMK requirements for S3 buckets in cross-account scenarios), and crafts policies that balance security requirements with functional needs while documenting rationale for security exceptions.
5. Designs, implements, and maintains automated security processes and controls using AWS tools and services to identify and remediate vulnerabilities and threats.
6. Collaborates with the Cloud Platform Engineers to create/maintain reusable Terraform modules for secure infrastructure provisioning.
7. Automates security processes and controls to identify and remediate vulnerabilities.
8. Implements continuous monitoring solutions to detect and respond to security incidents, working closely with the incident response team.
9. Conducts security risk assessments and develop strategies to mitigate identified risks. Implement automated security processes and controls to identify and remediate vulnerabilities and threats.
10. Maintains documentation for security processes, configurations, and procedures.
11. Uses Terraform for infrastructure security provisioning and management, creating and managing AWS resources using Terraform scripts.
12. Provides training and guidance to development and operations teams to ensure security throughout the SDLC using DevSecOps principles.
13. Integrates security practices/tools into CI/CD pipelines in GitHub.

Education

  • Bachelor's Degree in computer science, Information Technology, or a related field. required
  • Bachelor's degree may be substituted with four years of related experience (in addition to what is minimally required for the role), or an equivalent combination of education and related experience.

Work Experience

8 years of experience in AWS security and architecture roles required. Focus on the financial services industry, particularly the banking sector, preferred
5 years of experience working with AWS security tools required
Certifications in relevant security practices (CISSP, CISM, Comptia Sec+, etc…) preferred

About CoBank

The typical base pay range for this role is between $144,300 - $177,440. Compensation may vary based on individual job-related knowledge, skills, expertise, and experience. This position is eligible for a discretionary annual incentive program driven by organization and individual performance.

The listed salary, other compensation and benefits information is accurate as of the date of this posting. This job will be posted for a minimum of five (5) business days or until the position is filled. CoBank reserves the right to adjust compensation for all positions and to modify or discontinue benefits programs at any time in its sole discretion, subject to applicable law.

 

CoBank is a cooperative bank serving vital industries across rural America. The bank provides loans, leases, export financing and other financial services to agribusinesses and rural power, water and communications providers in all 50 states. The bank also provides wholesale loans and other financial services to affiliated Farm Credit associations serving more than 76,000 farmers, ranchers and other rural borrowers in 23 states around the country. CoBank is a member of the Farm Credit System, a nationwide network of banks and retail lending associations chartered to support the borrowing needs of U.S. agriculture, rural infrastructure and rural communities. Headquartered outside Denver, Colorado, CoBank serves customers from regional banking centers across the U.S. and also maintains an international representative office in Singapore.

 

REASONABLE ACCOMMODATION

We are committed to ensuring that our online application process provides an equal employment opportunity to all applicants, including qualified individuals with disabilities. If you are an applicant with a disability, or are assisting an applicant with a disability, and require accessibility assistance or would like to request a reasonable accommodation for any aspect of the application process, including completing an application, interviewing, or otherwise participating in the employee selection process, please submit a request by emailing recruiting@cobank.com. Include your contact information and specific details about your requested accommodation.

 

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time.

 

CoBank is an Equal Opportunity Employer.

 

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability, or status as a protected veteran.

Options

Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed

Need help finding the right job?

We can recommend jobs specifically for you! Click here to get started.