Design and implement enterprise cloud security standards, policies, and governance frameworks for AWS, Azure, and multi-cloud environments
Assess current cloud security posture and identify security gaps, vulnerabilities, risks, and improvement opportunities
Develop and maintain an enterprise security framework aligned with organizational, regulatory, and government requirements
Create a DevSecOps roadmap that integrates security controls throughout the software development lifecycle
Define and document security processes, procedures, standards, and best practices
Provide strategic guidance and recommendations on cloud security architecture, risk management, and security governance
Partner with IT leadership and stakeholders to support secure cloud adoption and modernization initiatives
Establish security controls and operational processes that support scalable development and cloud operations
Develop implementation plans and phased approaches for cloud security and DevSecOps initiatives
Create training materials, documentation, and knowledge transfer resources to support internal teams
Conduct workshops, training sessions, and mentoring to build internal cloud security capabilities
Collaborate with technical teams to improve security practices across development, infrastructure, and operations
Support compliance, governance, and risk management initiatives
Deliver security standards, policy documentation, roadmaps, operational procedures, and related project deliverables
Work independently while maintaining close alignment with organizational priorities and leadership objectives
10+ years of experience in cloud security architecture across AWS, Azure, and multi-cloud environments
Experience designing and implementing enterprise cloud security frameworks, governance models, and security standards
Strong expertise in DevSecOps practices and integrating security into development and operational workflows
Experience conducting security assessments, risk analysis, vulnerability reviews, and remediation planning
Deep understanding of cloud security architectures, security controls, compliance requirements, and governance frameworks
Experience supporting large-scale cloud transformation, modernization, or application development initiatives
Strong knowledge of cloud security best practices, identity and access management, security monitoring, and risk management
Excellent communication, presentation, documentation, and stakeholder management skills
Experience delivering training, knowledge transfer, and capability-building programs
Ability to work effectively with executive leadership, technical teams, and business stakeholders
Experience operating in regulated environments with strict security and compliance requirements
Government sector experience, including state or local government environments
Ability to work independently and lead strategic security initiatives
AWS Certified Security Specialty (SCS-C03)
Certified Cloud Security Professional (CCSP)