Cloud Security Architect

We need to output only HTML fragment, using

for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must include sections only when posting has real specific content. We must not repeat job title as heading. No Job ID etc. Remove boilerplate: "WHY UT SOUTHWESTERN?" is like about the organization; could be part of About the role? Actually "WHY UT SOUTHWESTERN?" is a description of the organization, maybe fits under "About the role"? But we have no explicit "About the role" heading in posting; we can create one with that content. Must preserve all substantive info. Must not include filler like "commensurate with experience". We need to extract sections: - About the role: could include the "WHY UT SOUTHWESTERN?" paragraph and maybe the "Job Summary". The "Job Summary" is a paragraph describing role. So we can combine. - Responsibilities: list of duties (the long list under "Job Duties"). - Requirements: includes Required EXPERIENCE AND EDUCATION (Education, Experience, Licenses and Certifications). Also Preferred Education/Experience maybe under Qualifications? Actually we have Required and Preferred. We can put Required under Requirements, Preferred under Qualifications or Skills? The instruction: Use headings for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to map content accordingly. We have Benefits section present. Pay not mentioned. Schedule: we have "Full-time" and "Hybrid role requiring a weekly presence in the office." Also "Shift Day". So we can include Schedule. Skills: maybe we can extract from duties? Could list technical skills: cloud platforms, security tools, etc. But we must not invent. If not explicit, we should not create Skills section if no specific content. The posting mentions "Subject matter expert on cloud security architecture, governance, risk management, and modern security technologies." Also "Evaluate and integrate cloud-native and third-party security tools (e.g., CSPM, CNAPP, CASB, IAM solutions)". Also "Manage and operate cloud security posture management (CSPM) platforms such as Wiz". Also "Technical expertise in interpreting Wiz findings". Also "Perform security reviews and architecture assessments". Also "Develop KPIs". Also "Mentor team members". Could treat as Skills. But we need to ensure we don't create placeholder. We have concrete skills listed. So we can create a Skills section with a list. Qualifications: could include Preferred Education Master's Degree, Preferred Experience Managing large cloud migrations in Azure & AWS environment for academic medical centres. Also maybe Certifications? But those are required. We'll put Preferred under Qualifications. Requirements: Required Education Bachelor's Degree, Required Experience 5 years designing, securing, implementing solutions in at least two of Azure, AWS, GCP and 2 years in an architect role managing large cloud environments. Licenses and Certifications: CISSP within 1 Year or Cloud security certification (e.g., CCSP, AWS Security Specialty, Azure Security Engineer). Also "Incumbent MUST RESIDE IN DFW AREA." That's a requirement (location). Also "Hybrid role requiring a weekly presence in the office." That's schedule but could be requirement? We'll put location under Requirements maybe as a note. We must not include boilerplate like Security and EEO statement. Remove those. We must not include application instructions. We must preserve all substantive info: So include the "WHY UT SOUTHWESTERN?" paragraph, the Job Summary paragraph, the Benefits list, the duties list, the required/preferred info, schedule info. We must not repeat job title as heading (the page already shows it). So we don't add a heading for the title. We must output only HTML fragment, no /, no markdown fences. Let's craft:

About the role

With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the number 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

This role is responsible for designing, implementing, and operationalizing security architecture and controls across multi-cloud environments, including Azure, AWS, and GCP. Ensures cloud deployments are secure, compliant, and aligned with institutional policies, regulatory standards, and industry best practices. Acts as a subject matter expert on cloud security architecture, governance, risk management, and modern security technologies. Leads strategic security initiatives to strengthen UTSW's cloud security posture and reduce risk across all cloud-based systems and services. Works under the general supervision of the Assistant Vice President, Information Security. Incumbent MUST RESIDE IN DFW AREA. Hybrid role requiring a weekly presence in the office.

Responsibilities

• Develop and maintain secure cloud architecture standards and reference designs for Azure, AWS, and GCP environments to support research, academic, and healthcare operations.
• Collaborate closely with the Cloud Engineering & operations team, Enterprise Architecture, DevOps, and Infrastructure teams to ensure secure design and implementation of cloud services and workloads.
• Work with application owners and development teams to integrate security into solution architectures and DevSecOps pipelines.
• Engage with senior leadership, compliance, and business stakeholders to align cloud security initiatives with institutional goals and regulatory requirements.
• Conduct threat modeling and security risk assessments for new and existing cloud deployments and services.
• Lead the development, implementation, and enforcement of cloud security policies, standards, and procedures.
• Evaluate and integrate cloud-native and third-party security tools (e.g., CSPM, CNAPP, CASB, IAM solutions) in collaboration with technical teams.
• Manage and operate cloud security posture management (CSPM) platforms such as Wiz, including configuring policies, monitoring findings, analyzing risks, and working with stakeholders to remediate vulnerabilities.
• Provide technical expertise in interpreting Wiz findings, correlating them to institutional risk, and translating technical issues into actionable remediation plans.
• Serve as the technical expert for investigating and responding to cloud security incidents, working closely with Information Security Operations and Incident Response teams.
• Perform security reviews and architecture assessments of cloud solutions to identify gaps and recommend mitigation strategies.
• Track and interpret compliance requirements relevant to cloud services (e.g., HIPAA, GDPR, Texas DIR) and collaborate with Compliance teams to ensure adherence.
• Develop key performance indicators (KPIs) and executive reporting metrics to measure cloud security program effectiveness and communicate outcomes to leadership.
• Mentor team members and promote knowledge sharing across Information Security, Cloud, and Architecture teams.
• Participate in enterprise security architecture reviews and advise on secure design patterns for cloud adoption and migration projects.
• Perform other duties as assigned.

Requirements

• Education: Bachelor's Degree in related field.
• Experience: 5 years designing, securing, and implementing solutions in at least two of the following public cloud platforms: Azure, AWS, GCP and 2 years in an architect role with managing large cloud environments.
• Licenses and Certifications: (CISSP) CERT INFO SYSTEMS SECURTY PROF within 1 Year or Cloud security certification (e.g., CCSP, AWS Security Specialty, Azure Security Engineer).
• Location: Must reside in DFW area.

Qualifications

• Preferred Education: Master's Degree in related field.
• Preferred Experience: Managing large cloud migrations in Azure & AWS environment for academic medical centres.

Skills

• Cloud security architecture (Azure, AWS, GCP)
• Governance, risk management, and modern security technologies
• Cloud-native and third-party security tools (CSPM, CNAPP, CASB, IAM)
• CSPM platforms (e.g., Wiz) configuration, monitoring, analysis, remediation
• Cloud security incident investigation and response
• Threat modeling and security risk assessments
• Policy, standards, and procedure development and enforcement
• Compliance tracking (HIPAA, GDPR, Texas DIR)
• KPI and executive reporting development
• Mentoring and knowledge sharing
• Enterprise security architecture review

Benefits

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer

Schedule

Full-time; Shift Day; Hybrid role requiring a weekly presence in the office.

Check: We included all substantive info. Did we miss any? The "Job Summary" we included as part of About the role. The "Incumbent MUST RESIDE IN DFW AREA." we placed under Requirements. The "Hybrid role requiring a weekly presence in the office." we placed under Schedule and also mentioned in About the role? We placed it in About the role as part of Job Summary? Actually we included it in About the role paragraph after the Job Summary? We included "Incumbent MUST RESIDE IN DFW AREA. Hybrid role requiring a weekly presence in the office." in the About the role paragraph after the Job Summary. That's okay but we also repeated in Schedule. Might be duplication but acceptable? The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. Duplication is okay as long as we preserve. However we might want to avoid duplication but it's not prohibited. Could keep only once. Let's keep it only in Schedule and not duplicate in About the role. Let's adjust About the role paragraph to not include that line. We'll keep About the role with the WHY UT SOUTHWESTERN? and Job Summary (without location/hybrid). Then Schedule will have full details. Let's rewrite About the role:

About the role

With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the number 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

This role is responsible for designing, implementing, and operationalizing security architecture and controls across