Cybersecurity Architect - Cloud

About the role

As a Cybersecurity Cloud Architect, you will develop and maintain enterprise security architecture aligned with SABSA, NIST, and TOGAF, ensuring consistency and scalability while driving security integration across the entire delivery lifecycle.

Responsibilities

• Own the ORCA CNAPP Platform: Serve as the global technical owner, accountable for strategy, policy development, alert governance, and risk findings management across CSPM, CIEM, and CWPP.
• Drive Enterprise Cloud Architecture: Design secure reference architectures for cloud and hybrid environments, ensuring they embed Zero Trust principles and automated guardrails.
• Lead Cloud Risk & Threat Modeling: Conduct cloud-centric threat modeling and attack-path analysis to proactively identify and mitigate risks using frameworks like MITRE ATT&CK.
• Architect Cloud Identity (IAM): Govern Cloud IAM solutions, including Entra ID, Hybrid Identity, federation patterns, and modern identity standards like RBAC/ABAC and SCIM provisioning.
• Enable DevSecOps: Partner with engineering teams to embed security into CI/CD pipelines, container workloads, and Infrastructure-as-Code (IaC) to champion shift-left practices.
• Ensure Compliance: Lead efforts to maintain compliance with NIST, SOX, NIS2, and ISO 27001, providing clear guidance on regulatory and contractual security requirements.

Requirements

Education: Bachelor’s degree in Cybersecurity, Information Security, or Computer Science.

Experience: 10+ years in Cybersecurity Architecture, with a proven track record in cloud environments.

Architectural Expertise: Solid foundation in enterprise frameworks such as SABSA, NIST, and TOGAF.

Security Tooling: Deep hands-on experience with CNAPP platforms (e.g., Orca), CSPM, CIEM, and CWPP.

Identity Management: Expertise in Azure AD / Entra ID, Conditional Access, and Zero Trust access controls.

Preferred Qualifications

Professional certifications such as SABSA, SANS Cloud Security, or Microsoft SC-100 (Cybersecurity Architect Expert).

Experience with Infrastructure-as-Code (Terraform, Bicep) and container/Kubernetes security.

Skills

A strategic technical leader capable of defining and enforcing security standards at an enterprise scale.

An influential communicator able to engage senior stakeholders, vendors, and engineering teams to drive secure outcomes.

A proactive problem-solver who thrives in complex, fast-paced global environments by applying a Zero Trust mindset.

Schedule

Permanent, full-time position based in Radnor, PA, reporting to the Deputy CISO. This role requires in-person presence and approximately 25% global travel.