Job Description

Cloud Security Architect

The Cloud Security Architect is a strategic change agent and cybersecurity ambassador responsible for implementing, maintaining, and enhancing security controls across multi-cloud environments (Azure and AWS). This role focuses on identifying and assessing security threats and risks, defining secure configurations, leading security automation initiatives, and ensuring compliance with industry frameworks (ISO 27001, SOC 2, NIST CSF, CIS Controls).

The Cloud Security Architect will collaborate with DevOps, Platform Engineering, and Product teams to embed security throughout the software development lifecycle.

What You Will Get To Do:

Cloud Security Operations

Design, implement, and maintain security controls across Azure and AWS cloud platforms.

Conduct continuous security control testing and monitoring of cloud security events and alerts through optimization and automation.

Triage, validate, and investigate security alerts; escalate incidents following incident response procedures.

Monitor and maintain Cloud Security Posture Management (CSPM) tools and Security Information and Event Management (SIEM) systems.

Respond to security incidents and conduct root cause analysis with remediation recommendations.

Security Engineering & Automation

Develop and implement Infrastructure as Code (IaC) security standards using tools such as Terraform, CloudFormation, and ARM templates.

Integrate security automation into CI/CD pipelines using tools such as GitHub Actions, Azure DevOps, Jenkins, or GitLab CI.

Build and maintain security tooling for vulnerability scanning, secrets management, and compliance monitoring.

Create and maintain secure design patterns, reference architectures, and security guardrails.

Implement policy-as-code using tools such as Open Policy Agent (OPA), Azure Policy, or AWS Config.

Collaboration & Security Enablement

Partner with DevOps, SRE, and Engineering teams to embed security best practices.

Provide security consultation during architecture reviews and design phases.

Reduce security vulnerabilities through security awareness training and knowledge sharing.

Document security procedures, runbooks, and standards.

Mentor junior security team members and promote security culture across the organization.

Risk Management & Compliance

Assess and manage cloud security risks using industry-standard frameworks including NIST and CIS Benchmarks.

Develop and track security risk metrics to enable data-driven decision-making.

Support compliance activities for ISO 27001, SOC 2, PCI-DSS, GDPR, and other relevant standards.

Conduct security assessments of cloud architecture and configurations.

Facilitate and coordinate internal and external penetration tests and vulnerability assessments.

Dimensions of the Role

Cross-functional collaboration with Engineering, DevOps, Compliance, and Product teams.

Internal and external stakeholder management across multiple geographic regions.

Problem-solving and troubleshooting during security incidents with distributed teams.

Ability to operate under pressure while providing clear status updates to leadership.

Capability to work independently and as part of a global virtual team.

Participation in an on-call rotation for security incident response.

What You Will Bring:

Cloud Security Expertise - AWS

Strong understanding of AWS security services including AWS Security Hub, GuardDuty, AWS Config, CloudTrail, and EKS.

Proficiency with AWS security features including KMS, Secrets Manager, Security Groups, NACLs, WAF, Shield, and CloudFront.

Experience with AWS identity and access management including IAM policies, roles, SCPs, AWS SSO, and Cognito.

Knowledge of AWS infrastructure including VPC, Transit Gateway, Direct Connect, and PrivateLink.

Familiarity with AWS PaaS security including Lambda, ECS/EKS security, API Gateway, and EventBridge.

Cloud Security Expertise - Azure

Strong understanding of Azure security services including Microsoft Defender for Cloud, Azure Security Center, Secure Score, and Microsoft Sentinel.

Proficiency with Azure security features including Key Vault, Network Security Groups (NSGs), Application Security Groups (ASGs), Azure Firewall, Azure DDoS Protection, Azure Front Door, and Web Application Firewall (WAF).

Experience with Azure identity and access management including Azure AD, Conditional Access, Privileged Identity Management (PIM), and RBAC.

Knowledge of Azure infrastructure including Virtual Networks, VPN Gateway, ExpressRoute, and Private Link/Endpoints.

Familiarity with Azure PaaS security including App Services, Azure Functions, Container Instances, and AKS security.

Technical Skills

Hands-on experience with Infrastructure as Code (Terraform, CloudFormation, ARM templates).

Proficiency in scripting and automation using Python, PowerShell, Bash, or Go.

Experience with container security, including Docker, Kubernetes, and container image scanning.

Knowledge of SIEM/SOAR platforms such as Splunk, Sentinel, Datadog, and Sumo Logic.

Understanding of DevSecOps practices and shift-left security principles.

Understanding of Artificial Intelligence fundamentals.

Experience with vulnerability management tools such as Qualys, Tenable, Rapid7, Wiz, and Prisma Cloud.

Knowledge of secrets management solutions including HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault.

Understanding of zero-trust architecture principles.

Familiarity with API security, OAuth 2.0, OIDC, and SAML.

Soft Skills

Excellent written and verbal communication skills with the ability to explain complex security concepts to non-technical stakeholders.

Strong analytical and problem-solving abilities.

Collaborative mindset with experience working in agile environments.

Proactive approach to identifying and mitigating security risks.

Qualifications & Experience

Required:

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent experience.

3-5+ years of experience in cloud security or security engineering roles.

Demonstrable experience securing both Azure and AWS environments.

Experience implementing security controls in production cloud environments.

Track record of security automation and tooling development.

Understanding of compliance frameworks including ISO 27001, SOC 2, NIST CSF, and CIS Controls.

Experience with incident response and forensics in cloud environments.

Preferred Certifications

One or more of the following certifications would be beneficial:

Cloud Platform: Azure Security Engineer Associate (AZ-500), AWS Certified Security - Specialty, Google Professional Cloud Security Engineer.

Security: CISSP, CCSP, CEH, GIAC (GCSA, GCED, GSEC), CompTIA Security+.

Cloud Architecture: Azure Solutions Architect Expert, AWS Solutions Architect - Professional.

DevSecOps: Certified DevSecOps Professional (CDP), Certified Kubernetes Security Specialist (CKS).

Additional Desirable Skills & Experience

Experience with multi-cloud and hybrid cloud architectures.

Knowledge of threat modeling and security architecture review processes.

Familiarity with the MITRE ATT&CK framework.

Experience with Cloud-Native Application Protection Platforms (CNAPP).

Understanding of software supply chain security.

Contributions to open-source security projects.

Experience with security research or threat intelligence.

Knowledge of data privacy regulations including GDPR, CCPA, and HIPAA.

SS&C Technologies

New Jobs

Security Architect (Cloud)