Sr Cloud Architect (Google Cloud Platform)-Austin, Dallas, San Antonio, TX

About the Role

Cloud Architects create and drive the architecture and design patterns for H-E-B’s cloud architecture, for both hybrid and cloud-first models. They perform analysis of existing cloud security and ancillary service configurations, design and create new or enhanced security improvements, and provide consultative services to internal business teams and external vendors to align solutions with H-E-B's cloud strategy.

Responsibilities

• Serve as a subject matter expert for cloud security, providing guidance on industry best practices and defense-in-depth strategies for H-E-B’s cloud-based digital platforms.
• Work with project teams to measure the testing and evaluation of new solutions, ensuring satisfaction of H-E-B security requirements.
• Collaborate with internal Information Systems teams to design security controls and improve cloud security infrastructure to support business and engineering needs.
• Create best-of-class security architecture designs and patterns using defensible industry reference architectures and standards.
• Measure and design tests of cloud configurations and infrastructure for vulnerabilities and security-relevant defects.
• Ensure all cloud infrastructure designs and implementations follow security and compliance control requirements, resolving configuration gaps through collaboration with stakeholders.
• Design, develop, document, automate, and implement security infrastructure in code.
• Create and maintain security architecture specifications and design documentation.
• Support setting the strategic security direction and approach for utilizing cloud-relevant technologies.

Requirements

• 5+ years of experience with the design and implementation of complex solutions in medium to large enterprises.
• 5+ years of experience building and integrating systems in public or hybrid cloud environments.
• Experience with Google Cloud Platform.
• Working knowledge of Terraform, Cloud Formation, Azure ARM Template, Pulumi, and/or Ansible.
• Solid understanding of web applications, web servers, application firewalls, frameworks, and protocols related to web application development, deployment, and operation in the cloud.
• Understanding of privacy and data protection regulations (e.g., PCI DSS and HIPAA/HITECH).
• Proficiency with one of: Python, Golang, JavaScript, PowerShell, Perl, or *nix Shell scripting.
• Proficiency with secrets management and vaulting technologies.
• Familiarity with Agile and other project methodologies.
• Ability to work well under pressure with strong organizational and interpersonal skills.

Nice to Have

• A Bachelor’s degree in Computer Science or Software Engineering.
• One or more professional security certifications such as CISSP, CISA, CEH, GIAC; and cloud certifications from AWS, Azure, and/or GCP.
• Experience with cloud security tools for discovery, compliance, and vulnerability detection.

Job ID: SECURITY ISSEC3232