Cloud Security Architect

About the role

An opportunity is available for a Cloud Security Architect to join as a senior practitioner on a cloud security team. This role reports to director‑level leadership and is responsible for shaping policy, leading architectural reviews, driving AI security governance, and providing direct technical guidance to product and engineering teams across all public cloud environments.

Key Responsibilities

• Act as a Cloud Security Subject Matter Expert (SME) for the Infosec department.
• Reduce cloud security risk, develop solutions, and lead implementations.
• Partner with product teams to design secure network and serverless architectures.
• Provide IAM policy guidance to enable product teams to implement least‑privilege access.
• Review cloud architecture and AI/ML workflows to advise development teams on security design principles.
• Define and enforce security controls for AI/ML pipelines, including model access governance and data handling.
• Create design artifacts to enable members of the Cloud Security team to implement solutions.
• Engage with Azure, GCP, and AWS account teams and technical advisors to influence roadmaps.
• Create and maintain documentation for cloud security implementations, processes, and standards.
• Collaborate with senior management to assess near‑ and long‑term cloud security needs.
• Participate in a tier 4 SME on‑call rotation.
• Mentor junior members of the team.
• Stay current with the latest cloud and AI threat mitigation tools and techniques.

Required Qualifications

Education: A bachelor’s degree in computer science, Information Security, or equivalent practical experience.

Experience: 6+ years in cloud security architecture roles, with strong understanding of cloud‑based infrastructure components, security risks in decentralized and hybrid environments, information security, compliance risk, and IP networking. Demonstrated ability to build and own security automation end‑to‑end.

Technical Skills:

• Proficiency in at least one scripting language (Python, Node.js, Golang, Bash, etc.).
• Hands‑on experience with cloud‑native security tools (Azure Defender for Cloud, GCP Security Command Center, AWS GuardDuty).
• Command‑line interfaces (Bash, PowerShell, AWS‑CLI).
• Security administration in Azure, GCP, and AWS.
• Perimeter security (WAF, CDN).
• Cloud network engineering (CIDR, routing, VPN).
• Zero‑trust architecture (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).
• SIEM/logging platforms (Splunk, Chronicle).
• Infrastructure as Code tools (Terraform, CloudFormation, Ansible).
• Container and orchestration technologies (Docker, Kubernetes).
• Developing and securing serverless applications.
• GitHub Security.
• Familiarity with security frameworks and benchmarks (NIST CSF, CIS Benchmarks, SOC 2).

Preferred Qualifications:

• Experience securing AI/ML workloads, including LLM API governance, training data access controls, and RAG pipeline security.
• Azure Certifications: Azure Fundamentals, Solutions Architect.
• GCP Certifications: Associate Cloud Engineer, Professional Security Engineer.
• AWS Certifications: Solutions Architect, Security Specialty.
• Security Engineer Certifications: CISSP, CompTIA Security+.
• Previous experience with Wiz, Splunk, or Brinqa integrations.

Benefits

• Medical, dental, vision, life, disability, and other supplemental insurance plans.
• Employee Stock Purchase Program (ESPP) and 401(k) with company match after 12 months.
• Health Savings Account (HSA) on HDHP plan.
• SupportLinc Employee Assistance Program (up to 8 free counseling sessions).
• Corporate discount savings program and other discounts.
• On‑demand training program, certification prep, and library of technical and leadership courses after 6 months.
• Certification discounts and perks for associations such as CompTIA and IIBA.
• Dedicated customer service team for consultants and a certified Career Coach.