The Cloud Security Architect will play a critical role in ensuring the security of our clients' digital infrastructure, applications, and data assets. This individual will lead efforts to design, implement, and maintain robust, cloud-based security solutions that protect our clients from cyber threats and vulnerabilities.
As a member of the information security team, the Cloud Security Architect will play a key leadership role in the InfoSec function of security architecture and provide guidance to other enterprise teams for all cloud security-related matters in Azure.
This is a full-time, exempt, remote position.
Responsibilities:
- Design, implement, and maintain robust security architecture across our client's cloud infrastructure in Azure.
- Identify security gaps, define security standards, and lead the remediation of security risks to deliver continuous improvement initiatives.
- Design and implement secure cloud infrastructure configurations, including network segmentation, access controls, and account architecture
- Develop, implement, and socialize technical patterns, standards, and guidance for cloud infrastructure and applications
- Monitor cloud security posture and conduct regular security assessments and risk analysis to identify vulnerabilities and prioritize remediation efforts
- Automate security policies and workflows using scripting languages and cloud native security tools to improve efficiency and scalability
- Assist with incident response activities for cloud-related security incidents, including investigation, containment, remediation, and post-mortem analysis.
- Collaborate with cross-functional teams (Product, DevOps, Technology, Legal, and Compliance to integrate security practices into cloud deployments.
Requirements:
- Deep technical knowledge and hands-on experience with Azure and emerging cloud security technologies.
- Expert level knowledge of cloud-based misconfigurations, attack paths, vulnerabilities, and data risks
- Extensive knowledge and experience with DevSecOps in an Azure environment and securing CI/CD Pipelines
- Azure focused Infrastructure as Code (IaC) proficiency with experience deploying secure infrastructure (Bicep/Terraform/ARM)
- Strong Azure security fundamentals and experience administering Entra ID tenants and all associated objects and resources
- Azure VNet experience – Understanding of Azure native NGSs, firewalls, and VPNs
- Hands-on experience implementing CNAPP solutions (including CSPM, DSPM, CIEM, IaC, Container, and dependency security)
- Demonstrated experience developing and implementing security controls, policies, and procedures for cloud infrastructure and sensitive data
- In-depth understanding and experience implementing Zero Trust Architecture (ZTA) in the cloud
- Strong familiarity with Snowflake and related security concepts, including data encryption and masking, auditing and monitoring, RBAC, and leveraging least privilege principles.
- Prior experience implementing and monitoring data loss prevention solutions in a cloud environment
- Experience with implementing and utilizing SASE solutions like Zscaler to secure remote access
Supervisory Responsibilities:
- None.
Experience:
- 10+ Years of overall IT Experience with a major emphasis on Information Security.
- 3+ Years of experience building and integrating systems within cloud providers.
- Strong knowledge of cloud providers (Azure).
- Knowledge of cybersecurity frameworks (ISO 27001, NIST 800-53, CIS Controls, PCI DSS, HITRUST).
Education:
- Bachelor’s degree preferred.
- Cloud Security Certifications, CISSP or CCSP certifications are preferred.